Skip to content
OpenAdvisories

Archive

31 August 2006

Vulnerabilities first published on this day (UTC), newest first.

55 results · Feed

  • Unscored —

    Gonafish.com LinksCaffe 2.0 and 3.0 do not properly restrict access to administrator functions, which allows remote att…

  • Unscored —

    Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value m…

  • Unscored —

    Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings…

  • Unscored —

    Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an…

  • Unscored —

    The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside…

  • Unscored —

    Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an…

  • Unscored —
    CVE-2006-4464 Public exploit

    The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, allows remote attackers to cause a denial of service …

  • Unscored —

    Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform "remote execution," r…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary…

  • Unscored —

    SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote att…

  • Unscored —

    Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown im…

  • Unscored —

    PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-4458 Public exploit

    Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allo…

  • Unscored —
    CVE-2006-4456 Public exploit

    PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execu…

  • Unscored —

    SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie mat…