Skip to content
OpenAdvisories

Archive

2 October 2006

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —

    Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution relate…

  • Unscored —
    CVE-2006-5125 Public exploit

    Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows rem…

  • Unscored —
    CVE-2006-5114 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-5102 Public exploit

    PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter …

  • Unscored —
    CVE-2006-5135 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-5100 Public exploit

    PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote at…

  • Unscored —
    CVE-2006-5124 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute a…

  • Unscored —
    CVE-2006-5115 Public exploit

    Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary lo…

  • Unscored —

    Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi…

  • Unscored —

    SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute …

  • Unscored —
    CVE-2006-5118 Public exploit

    PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows …

  • Unscored —

    Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impa…

  • Unscored —

    The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows att…

  • Unscored —

    module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attacke…

  • Unscored —
    CVE-2006-5107 Public exploit

    Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execu…