Skip to content
OpenAdvisories

Archive

21 September 2006

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3507 Public exploit

    Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physical…

  • Unscored —
    CVE-2006-4918 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute a…

  • Unscored —
    CVE-2006-4922 Public exploit

    Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ea…

  • Unscored —
    CVE-2006-4920 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to ex…

  • Unscored —
    CVE-2006-4923 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-4917 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-4915 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-4921 Public exploit

    PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4916 Public exploit

    SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-4913 Public exploit

    Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to i…

  • Unscored —
    CVE-2006-4906 Public exploit

    SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4912 Public exploit

    PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-4904 Public exploit

    Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to …