Skip to content
OpenAdvisories

Archive

25 September 2006

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —
    CVE-2006-4979 Public exploit

    Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote …

  • Unscored —
    CVE-2006-4973 Public exploit

    Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.…

  • Unscored —

    MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins…

  • Unscored —
    CVE-2006-4970 Public exploit

    PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to e…

  • Unscored —
    CVE-2006-4969 Public exploit EPSS 12%

    Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-4978 Public exploit

    Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute ar…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-4977 Public exploit

    Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Bes…

  • Unscored —

    The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct…

  • Unscored —
    CVE-2006-4968 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to exec…

  • Unscored —

    Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers t…

  • Unscored —
    CVE-2006-4974 Public exploit

    Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a …

  • Unscored —
    CVE-2006-4965 Public exploit EPSS 13%

    Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly cond…

  • Unscored —
    CVE-2006-4966 Public exploit

    PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote a…