Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4497 Public exploit

    SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-4489 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arb…

  • Unscored —
    CVE-2006-4498 Public exploit

    PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows rem…

  • Unscored —
    CVE-2006-4504 Public exploit

    SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and …

  • Unscored —
    CVE-2006-4488 Public exploit

    PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_…

  • Unscored —
    CVE-2006-4495 Public exploit EPSS 21%

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execu…

  • Unscored —
    CVE-2006-4505 Public exploit

    CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and c…

  • Unscored —
    CVE-2006-4494 Public exploit EPSS 22%

    Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execu…

  • Unscored —
    CVE-2006-4490 Public exploit

    Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 a…

  • Unscored —
    CVE-2006-4479 Public exploit

    Cross-site scripting (XSS) vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to…

  • Unscored —
    CVE-2006-4477 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute…

  • Unscored —
    CVE-2006-4478 Public exploit

    SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute…

  • Unscored —
    CVE-2006-4464 Public exploit

    The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-4458 Public exploit

    Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allo…

  • Unscored —
    CVE-2006-4456 Public exploit

    PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-4454 Public exploit

    Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-4455 Public exploit

    Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via u…

  • Unscored —
    CVE-2006-4452 Public exploit

    PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regi…

  • Unscored —
    CVE-2006-4450 Public exploit

    usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web…

  • Unscored —
    CVE-2006-4449 Public exploit

    Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions …

  • Unscored —
    CVE-2006-4305 Public exploit EPSS 72%

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long datab…

  • Unscored —
    CVE-2006-4446 Public exploit EPSS 62%

    Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 S…

  • Unscored —
    CVE-2006-4448 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote atta…

  • Unscored —
    CVE-2005-4809 Public exploit

    Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof …

  • Unscored —
    CVE-2006-4443 Public exploit

    PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers t…

  • Unscored —
    CVE-2006-4440 Public exploit

    PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-4444 Public exploit

    Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute a…

  • Unscored —
    CVE-2006-4441 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-4427 Public exploit

    index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the …

  • Unscored —
    CVE-2006-4421 Public exploit

    Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG…

  • Unscored —
    CVE-2006-4425 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP cod…

  • Critical 9.8
    CVE-2006-4428 Public exploit

    PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4423 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-4424 Public exploit

    PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to exec…

  • Unscored —
    CVE-2006-4426 Public exploit

    PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES…

  • Unscored —
    CVE-2006-4422 Public exploit

    PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote att…

  • Unscored —
    CVE-2006-4418 Public exploit

    Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrar…

  • Unscored —
    CVE-2006-4419 Public exploit

    SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-4420 Public exploit

    Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local…

  • Unscored —
    CVE-2006-3124 Public exploit EPSS 20%

    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of …