Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4166 Public exploit

    PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4163 Public exploit

    PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote…

  • Unscored —
    CVE-2006-4157 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to i…

  • Unscored —
    CVE-2006-4160 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers t…

  • Unscored —
    CVE-2006-4161 Public exploit

    Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remot…

  • Unscored —
    CVE-2006-4158 Public exploit

    PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-4159 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2006-4144 Public exploit EPSS 11%

    Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to ca…

  • Unscored —
    CVE-2006-4125 Public exploit

    Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-4142 Public exploit

    SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-4126 Public exploit

    The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2006-4123 Public exploit

    PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execu…

  • Unscored —
    CVE-2006-4122 Public exploit

    Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries…

  • Unscored —
    CVE-2006-4138 Public exploit EPSS 20%

    Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers…

  • Unscored —
    CVE-2006-4129 Public exploit

    PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlie…

  • Unscored —
    CVE-2006-4121 Public exploit

    PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-4131 Public exploit

    Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, al…

  • Unscored —
    CVE-2006-4130 Public exploit

    PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and e…

  • Unscored —
    CVE-2006-4140 Public exploit

    Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2006-4114 Public exploit

    SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-4113 Public exploit

    PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions all…

  • Unscored —
    CVE-2006-4115 Public exploit

    PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows r…

  • Unscored —
    CVE-2006-4102 Public exploit

    PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier all…

  • Unscored —
    CVE-2006-4103 Public exploit

    PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote atta…

  • Unscored —
    CVE-2006-4110 Public exploit EPSS 40%

    Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that c…

  • Unscored —
    CVE-2006-4019 Public exploit

    Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to over…

  • Unscored —
    CVE-2006-4081 Public exploit

    preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute com…

  • Unscored —
    CVE-2006-4089 Public exploit EPSS 11%

    Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of s…

  • Unscored —
    CVE-2006-4085 Public exploit

    PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remo…

  • Unscored —
    CVE-2006-4074 Public exploit

    PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and ea…

  • Unscored —
    CVE-2006-4077 Public exploit

    PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and p…

  • Unscored —
    CVE-2006-4072 Public exploit

    Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-4073 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arb…

  • Unscored —
    CVE-2006-4075 Public exploit EPSS 17%

    Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and ea…

  • Unscored —
    CVE-2006-4071 Public exploit EPSS 24%

    Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP…

  • Unscored —
    CVE-2006-4065 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attacker…

  • Unscored —
    CVE-2006-4068 Public exploit

    The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for…

  • Unscored —
    CVE-2006-4060 Public exploit

    PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execut…

  • Unscored —
    CVE-2006-4064 Public exploit

    SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2006-4059 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote …