Skip to content
OpenAdvisories

Archive

19 September 2006

Vulnerabilities first published on this day (UTC), newest first.

← August 2006 2006 / September /19 October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

62 results · Feed

  • Unscored —
    CVE-2006-4857 Public exploit

    SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to e…

  • Unscored —
    CVE-2006-4865 Public exploit

    Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/ins…

  • Medium —
    CVE-2006-4684

    Zope allows remote attackers to read arbitrary files

    The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability …

    zope2 PyPI
  • Unscored —
    CVE-2006-4862

    SQL injection vulnerability in default.aspx in easypage allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-4858 Public exploit

    PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier …

  • Unscored —
    CVE-2006-4859 Public exploit

    Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Ma…

  • Unscored —
    CVE-2006-4246

    Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not …

  • Unscored —
    CVE-2006-4864

    PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execut…

  • Unscored —
    CVE-2006-4860

    Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) n…

  • Unscored —
    CVE-2006-4863

    Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to exec…

  • Unscored —
    CVE-2006-4855 Public exploit

    The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal F…

  • Unscored —
    CVE-2006-4856

    Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-4844 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Doke…

  • Unscored —
    CVE-2006-4846

    Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is …

  • Unscored —
    CVE-2006-4849 Public exploit

    PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-4850 Public exploit

    PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remot…

  • Unscored —
    CVE-2006-4848 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-4851

    PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows …

  • Unscored —
    CVE-2006-4853 Public exploit

    SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-4852 Public exploit

    SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-4845 Public exploit

    PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remot…

  • Unscored —
    CVE-2006-4847 Public exploit EPSS 86%

    Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute ar…