Skip to content
OpenAdvisories

Archive

21 August 2006

Vulnerabilities first published on this day (UTC), newest first.

38 results · Feed

  • Unscored —

    PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo al…

  • Unscored —

    PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allo…

  • Unscored —
    CVE-2006-4277 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbi…

  • Unscored —

    PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) all…

  • Unscored —
    CVE-2006-4278 Public exploit

    PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers …

  • Unscored —
    CVE-2006-4276 Public exploit

    PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-4279 Public exploit

    SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary…

  • Critical 9.8

    Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage Component (com_lmtg_myhomepage) for Mambo all…

  • Unscored —

    Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a de…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop (c…

  • Unscored —
    CVE-2006-4273 Public exploit

    Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitra…

  • Unscored —

    Kaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain responses to ICMP (1) ti…

  • Unscored —

    PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers t…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-4267 Public exploit

    Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —

    Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (res…

  • Unscored —

    PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Ma…

  • Unscored —
    CVE-2006-4270 Public exploit

    PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ea…

  • Unscored —

    Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary we…

  • Unscored —

    Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories…

  • Unscored —

    Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticat…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers t…

  • Unscored —
    CVE-2006-4254 Public exploit

    Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspeci…

  • Unscored —

    index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, wh…

  • Unscored —
    CVE-2006-4253 Public exploit EPSS 15%

    Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (…

  • Unscored —

    IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause a denial of service (c…

  • Unscored —

    The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a deni…

  • Unscored —

    Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan wr…

  • Unscored —

    AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Cont…

  • Unscored —
    CVE-2006-4236 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-4239 Public exploit

    PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier all…

  • Unscored —
    CVE-2006-4238 Public exploit

    SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2006-4242 Public exploit

    PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote…

  • Unscored —
    CVE-2006-4237 Public exploit

    PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and…

  • Unscored —
    CVE-2006-4241 Public exploit

    PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) al…

  • Unscored —
    CVE-2006-4240 Public exploit

    PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PH…

  • Unscored —

    Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows re…