Skip to content
OpenAdvisories

Archive

September 2006

Vulnerabilities first published in this month (UTC), newest first.

← August 2006 2006 / September October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2006-5031 Public exploit

    CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files

    Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js …

    cakephp/cakephp cakephp Debian Packagist
  • Medium —
    CVE-2006-4936

    Moodle does not properly validate module instance id

    Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

    moodle/moodle Packagist
  • Medium —
    CVE-2006-4684

    Zope allows remote attackers to read arbitrary files

    The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability …

    zope2 PyPI