Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

235 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5547 Public exploit

    PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.…

  • Unscored —
    CVE-2006-5529 Public exploit

    Cross-site scripting (XSS) vulnerability in smumdadotcom_ascyb_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote…

  • Unscored —
    CVE-2006-5548 Public exploit

    PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.…

  • Unscored —
    CVE-2006-5543 Public exploit

    PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when reg…

  • Unscored —
    CVE-2006-5531 Public exploit

    PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-5527 Public exploit

    PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers t…

  • Unscored —
    CVE-2006-5550 Public exploit

    The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors invol…

  • Unscored —
    CVE-2006-5554 Public exploit

    Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary loca…

  • Unscored —
    CVE-2006-5528 Public exploit

    Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute…

  • Unscored —
    CVE-2006-5551 Public exploit

    Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2006-5535 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attac…

  • Unscored —
    CVE-2006-5522 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to e…

  • Unscored —
    CVE-2006-5519 Public exploit

    PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier comp…

  • Unscored —
    CVE-2006-5523 Public exploit

    PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-5517 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote…

  • Unscored —
    CVE-2006-5516 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote att…

  • Unscored —
    CVE-2006-5524 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-5518 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers…

  • Unscored —
    CVE-2006-5521 Public exploit

    PHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-5514 Public exploit

    SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attac…

  • Unscored —
    CVE-2006-5525 Public exploit

    Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL i…

  • Unscored —
    CVE-2006-5510 Public exploit

    Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arb…

  • Unscored —
    CVE-2006-5508 Public exploit

    Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute …

  • Unscored —
    CVE-2006-5503 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to…

  • Unscored —
    CVE-2006-5511 Public exploit

    Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, al…

  • Unscored —
    CVE-2006-5506 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5509 Public exploit

    Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-5512 Public exploit

    Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-5505 Public exploit

    Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the l…

  • Unscored —
    CVE-2006-5495 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2006-5494 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB mod…

  • Unscored —
    CVE-2006-5497 Public exploit

    PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when re…

  • Unscored —
    CVE-2006-5493 Public exploit

    PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote at…

  • Unscored —
    CVE-2006-5485 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-5482 Public exploit

    ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate functi…

  • Unscored —
    CVE-2006-5483 Public exploit

    p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, w…

  • Unscored —
    CVE-2006-5472 Public exploit

    PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-5471 Public exploit

    PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlie…

  • Unscored —
    CVE-2006-5480 Public exploit

    PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers t…

  • Unscored —
    CVE-2006-5478 Public exploit EPSS 85%

    Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell N…