Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3994 Public exploit

    SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha…

  • Unscored —
    CVE-2006-3987 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remo…

  • Unscored —
    CVE-2006-3990 Public exploit EPSS 19%

    Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree comp…

  • Unscored —
    CVE-2006-3986 Public exploit

    PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-3995 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.ph…

  • Unscored —
    CVE-2006-3988 Public exploit

    PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attack…

  • Unscored —
    CVE-2006-3980 Public exploit

    PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM)…

  • Unscored —
    CVE-2006-3991 Public exploit

    PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote att…

  • Unscored —
    CVE-2006-3982 Public exploit

    PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers …

  • Unscored —
    CVE-2006-3984 Public exploit

    PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later ver…

  • Unscored —
    CVE-2006-3993 Public exploit

    PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows…

  • Unscored —
    CVE-2006-3996 Public exploit

    SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execu…

  • Unscored —
    CVE-2006-3459 Public exploit EPSS 56%

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and oth…

  • Unscored —
    CVE-2006-3972 Public exploit

    Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allo…

  • Unscored —
    CVE-2006-3964 Public exploit

    PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers …

  • Unscored —
    CVE-2006-3969 Public exploit

    PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and…

  • Unscored —
    CVE-2006-3962 Public exploit

    PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannai…

  • Unscored —
    CVE-2006-3967 Public exploit

    PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Mos…

  • Unscored —
    CVE-2006-3970 Public exploit

    PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows …

  • Unscored —
    CVE-2006-3963 Public exploit

    Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-3966 Public exploit

    PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNews…

  • Unscored —
    CVE-2006-3957 Public exploit

    PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3960 Public exploit

    SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3959 Public exploit

    SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remot…

  • Unscored —
    CVE-2006-3951 Public exploit

    PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remot…

  • Unscored —
    CVE-2006-3961 Public exploit EPSS 34%

    Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite…

  • Unscored —
    CVE-2006-3952 Public exploit EPSS 67%

    Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-3947 Public exploit

    PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earli…

  • Unscored —
    CVE-2006-3948 Public exploit

    Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-3949 Public exploit

    PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allo…

  • Unscored —
    CVE-2006-3955 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP…