Skip to content
OpenAdvisories

Archive

20 October 2006

Vulnerabilities first published on this day (UTC), newest first.

35 results · Feed

  • Unscored —

    PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register_globals is enabled,…

  • Unscored —
    CVE-2006-5436 Public exploit

    PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP …

  • Unscored —

    PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register_globals is enabled, al…

  • Unscored —

    PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register_globals is enabled, a…

  • Unscored —

    Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via…

  • Unscored —

    PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows …

  • Unscored —
    CVE-2006-5434 Public exploit

    PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitr…

  • Unscored —

    PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-5433 Public exploit

    PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to exec…

  • Unscored —
    CVE-2006-5432 Public exploit

    Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is…

  • Unscored —
    CVE-2006-4926 Public exploit

    The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for …

  • Unscored —
    CVE-2006-5431 Public exploit

    PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central …

  • Unscored —

    XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application cr…

  • Unscored —

    Unspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006 allows remote attackers …

  • Unscored —
    CVE-2006-5423 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows re…

  • Unscored —
    CVE-2006-5429 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to exec…

  • Unscored —
    CVE-2006-5426 Public exploit

    PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5427 Public exploit

    PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic…

  • Unscored —
    CVE-2006-5428 Public exploit

    rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which …

  • Unscored —

    Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.

  • Unscored —
    CVE-2006-5415 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ea…

  • Unscored —
    CVE-2006-5413 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execut…

  • Unscored —

    McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security …

  • Unscored —
    CVE-2006-5421 Public exploit

    WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathto…

  • Unscored —
    CVE-2006-5412 Public exploit

    admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypa…

  • Unscored —

    Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DN…

  • Unscored —
    CVE-2006-5418 Public exploit

    PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer…

  • Unscored —
    CVE-2006-5422 Public exploit

    PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earli…

  • Unscored —
    CVE-2006-5419 Public exploit

    PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regi…

  • Unscored —

    PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote att…

  • Unscored —

    Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall En…

  • Unscored —
    CVE-2006-5411 Public exploit

    Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlie…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for Highwall Enterprise an…