Skip to content
OpenAdvisories

Archive

September 2006

Vulnerabilities first published in this month (UTC), newest first.

255 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4857 Public exploit

    SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to e…

  • Unscored —
    CVE-2006-4865 Public exploit

    Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/ins…

  • Unscored —
    CVE-2006-4858 Public exploit

    PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier …

  • Unscored —
    CVE-2006-4859 Public exploit

    Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Ma…

  • Unscored —
    CVE-2006-4855 Public exploit

    The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal F…

  • Unscored —
    CVE-2006-4844 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Doke…

  • Unscored —
    CVE-2006-4849 Public exploit

    PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-4850 Public exploit

    PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remot…

  • Unscored —
    CVE-2006-4848 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-4853 Public exploit

    SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-4852 Public exploit

    SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-4845 Public exploit

    PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remot…

  • Unscored —
    CVE-2006-4847 Public exploit EPSS 86%

    Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute ar…

  • Unscored —
    CVE-2006-4832 Public exploit EPSS 12%

    Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R…

  • Unscored —
    CVE-2006-4836 Public exploit

    SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-4825 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and …

  • Unscored —
    CVE-2006-4824 Public exploit

    PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remo…

  • Unscored —
    CVE-2006-4829 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject ar…

  • Unscored —
    CVE-2006-4827 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-4838 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-4826 Public exploit

    PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2006-4828 Public exploit

    PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to exe…

  • Unscored —
    CVE-2006-4823 Public exploit

    PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlie…

  • Unscored —
    CVE-2006-4834 Public exploit

    PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute …

  • Unscored —
    CVE-2006-4437 Public exploit

    Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in…

  • Unscored —
    CVE-2006-4793 Public exploit

    Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-4796 Public exploit

    Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-4794 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-4781 Public exploit

    Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2006-4782 Public exploit

    src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass auth…

  • Unscored —
    CVE-2006-4779 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier…

  • Unscored —
    CVE-2006-4788 Public exploit

    PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, wh…

  • Unscored —
    CVE-2006-4789 Public exploit

    Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or exe…

  • Unscored —
    CVE-2006-4780 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-4777 Public exploit EPSS 80%

    Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) f…

  • Unscored —
    CVE-2006-4771 Public exploit

    Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-4764 Public exploit

    PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execu…

  • Unscored —
    CVE-2006-4769 Public exploit

    PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2006-4770 Public exploit

    PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-4766 Public exploit

    Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attacker…