Skip to content
OpenAdvisories

Archive

6 September 2006

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4593 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-4594 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow rem…

  • Unscored —
    CVE-2006-4583 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-4586 Public exploit

    The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authentica…

  • Unscored —
    CVE-2006-4592 Public exploit

    Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-4589 Public exploit

    PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allow…

  • Unscored —
    CVE-2006-4584 Public exploit

    Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passw…

  • Unscored —
    CVE-2006-4591 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Selle…

  • Unscored —
    CVE-2006-4563 Public exploit

    Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to…

  • Unscored —
    CVE-2006-4545 Public exploit

    PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-4559 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attack…

  • Unscored —
    CVE-2006-4553 Public exploit

    PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joo…

  • Unscored —
    CVE-2006-4543 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-4558 Public exploit

    DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to exec…

  • Unscored —
    CVE-2006-3636 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitra…