Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

235 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5446 Public exploit

    SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to…

  • Unscored —
    CVE-2006-5444 Public exploit EPSS 86%

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12…

  • Unscored —
    CVE-2006-5450 Public exploit

    SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to exe…

  • Unscored —
    CVE-2006-5458 Public exploit

    PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execut…

  • Unscored —
    CVE-2003-1307 Public exploit

    The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to th…

  • Unscored —
    CVE-2006-5436 Public exploit

    PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-5434 Public exploit

    PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-5433 Public exploit

    PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to exec…

  • Unscored —
    CVE-2006-5432 Public exploit

    Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is…

  • Unscored —
    CVE-2006-4926 Public exploit

    The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for …

  • Unscored —
    CVE-2006-5431 Public exploit

    PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote a…

  • Unscored —
    CVE-2006-5423 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows re…

  • Unscored —
    CVE-2006-5429 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to exec…

  • Unscored —
    CVE-2006-5426 Public exploit

    PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5427 Public exploit

    PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic…

  • Unscored —
    CVE-2006-5428 Public exploit

    rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which …

  • Unscored —
    CVE-2006-5415 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ea…

  • Unscored —
    CVE-2006-5413 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execut…

  • Unscored —
    CVE-2006-5421 Public exploit

    WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathto…

  • Unscored —
    CVE-2006-5412 Public exploit

    admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypa…

  • Unscored —
    CVE-2006-5418 Public exploit

    PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer…

  • Unscored —
    CVE-2006-5422 Public exploit

    PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execu…

  • Unscored —
    CVE-2006-5419 Public exploit

    PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regi…

  • Unscored —
    CVE-2006-5411 Public exploit

    Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlie…

  • Unscored —
    CVE-2006-5399 Public exploit

    PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is …

  • Unscored —
    CVE-2006-5401 Public exploit

    PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier …

  • Unscored —
    CVE-2006-5398 Public exploit

    SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-5400 Public exploit

    PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows…

  • Unscored —
    CVE-2006-5402 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-5388 Public exploit

    SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-5392 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2006-5395 Public exploit

    Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute …

  • Unscored —
    CVE-2006-5383 Public exploit

    SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-5391 Public exploit

    Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long strin…

  • Unscored —
    CVE-2006-5384 Public exploit

    PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 …

  • Unscored —
    CVE-2006-5385 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows…

  • Unscored —
    CVE-2006-5387 Public exploit

    PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB modul…

  • Unscored —
    CVE-2006-5390 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 modu…

  • Unscored —
    CVE-2006-5386 Public exploit

    PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals i…

  • Unscored —
    CVE-2006-5379 Public exploit EPSS 27%

    The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762…