Skip to content
OpenAdvisories

Archive

1 September 2006

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-4523 Public exploit

    The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote a…

  • Unscored —

    Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute a…

  • Unscored —
    CVE-2006-4531 Public exploit

    PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execu…

  • Unscored —

    SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals i…

  • Unscored —
    CVE-2006-4532 Public exploit

    PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ea…

  • Unscored —
    CVE-2006-4525 Public exploit

    Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remot…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arb…

  • Unscored —

    Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web sc…

  • Unscored —

    includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficien…

  • Unscored —
    CVE-2006-4524 Public exploit

    Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute ar…