Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4369 Public exploit

    Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic…

  • Unscored —
    CVE-2006-4365 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4367 Public exploit

    SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote at…

  • Unscored —
    CVE-2006-4374 Public exploit

    IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a cra…

  • Unscored —
    CVE-2006-4366 Public exploit

    PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2006-4368 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows re…

  • Unscored —
    CVE-2006-4372 Public exploit

    PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_const…

  • Unscored —
    CVE-2006-4373 Public exploit

    PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attack…

  • Unscored —
    CVE-2006-4363 Public exploit

    PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mamb…

  • Unscored —
    CVE-2006-4357 Public exploit

    PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute…

  • Unscored —
    CVE-2006-4362 Public exploit

    Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-4359 Public exploit

    Stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 on Windows 2000 allows remote attackers to exe…

  • Unscored —
    CVE-2006-4358 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-4364 Public exploit EPSS 57%

    Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacke…

  • Unscored —
    CVE-2006-4354 Public exploit

    PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote att…

  • Unscored —
    CVE-2006-4348 Public exploit

    PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Ma…

  • Unscored —
    CVE-2006-4349 Public exploit

    PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2006-4329 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote at…

  • Unscored —
    CVE-2006-4318 Public exploit EPSS 62%

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

  • Unscored —
    CVE-2006-4322 Public exploit

    PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, wh…

  • Unscored —
    CVE-2006-4321 Public exploit

    PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier …

  • Unscored —
    CVE-2006-4313 Public exploit EPSS 12%

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x …

  • Unscored —
    CVE-2006-4311 Public exploit

    PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-4308 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community …

  • Unscored —
    CVE-2006-4310 Public exploit

    Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when a…

  • Unscored —
    CVE-2006-4300 Public exploit

    SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4296 Public exploit

    PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allo…

  • Unscored —
    CVE-2006-4301 Public exploit EPSS 39%

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attri…

  • Unscored —
    CVE-2006-4295 Public exploit

    Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject a…

  • Unscored —
    CVE-2006-4288 Public exploit

    PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits…

  • Unscored —
    CVE-2006-4284 Public exploit

    SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-4282 Public exploit

    PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier …

  • Unscored —
    CVE-2006-4285 Public exploit

    PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-4293 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2006-4287 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attacker…

  • Unscored —
    CVE-2006-4291 Public exploit

    PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.…

  • Unscored —
    CVE-2006-4277 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4278 Public exploit

    PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers …

  • Unscored —
    CVE-2006-4276 Public exploit

    PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-4279 Public exploit

    SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary…