Skip to content
OpenAdvisories

Archive

12 October 2006

Vulnerabilities first published on this day (UTC), newest first.

← September 2006 2006 / October /12 November 2006 →
  1. 1 
  2. 258
  3. 313
  4. 48
  5. 53
  6. 625
  7. 7 
  8. 8 
  9. 925
  10. 1032
  11. 117
  12. 1231
  13. 1311
  14. 14 
  15. 15 
  16. 1611
  17. 1734
  18. 1871
  19. 195
  20. 2035
  21. 211
  22. 22 
  23. 2320
  24. 2420
  25. 2526
  26. 2643
  27. 2728
  28. 2811
  29. 29 
  30. 306
  31. 3127
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2006-5255

    PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execu…

  • Unscored —
    CVE-2006-5253

    PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote …

  • Unscored —
    CVE-2006-5259 Public exploit

    PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5258

    The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0…

  • Unscored —
    CVE-2006-5263 Public exploit

    Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-5256 Public exploit

    PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remot…

  • Unscored —
    CVE-2006-5261 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5260

    PHP remote file inclusion vulnerability in compteur.php in Compteur 2 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-5254 Public exploit

    PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration …

  • Unscored —
    CVE-2006-5252

    PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to …

  • Unscored —
    CVE-2006-5251 Public exploit

    PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-5264

    Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5262 Public exploit

    CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticate…

  • Unscored —
    CVE-2006-5257 Public exploit

    PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0…

  • Unscored —
    CVE-2006-4813

    The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers …

  • Unscored —
    CVE-2006-4842 Public exploit

    The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment …

  • Unscored —
    CVE-2006-4516 Public exploit

    Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and …

  • Unscored —
    CVE-2006-5239 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-5242

    SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5246

    Eazy Cart allows remote attackers to change prices and other critical fields via unspecified vectors to easycart.php, p…

  • Unscored —
    CVE-2006-5248

    Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attacke…

  • Unscored —
    CVE-2006-5250 Public exploit

    PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows…

  • Unscored —
    CVE-2006-5238

    Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack …

  • Unscored —
    CVE-2006-5247

    Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2006-5243 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabl…

  • Unscored —
    CVE-2006-5249 Public exploit

    PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remo…

  • Unscored —
    CVE-2006-5240 Public exploit

    PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enab…

  • Unscored —
    CVE-2006-5244 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enab…

  • Unscored —
    CVE-2006-5237

    SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-5241 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is e…

  • Unscored —
    CVE-2006-5245

    Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admi…