Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

235 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5315 Public exploit

    PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5318 Public exploit

    PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to exec…

  • Unscored —
    CVE-2006-5319 Public exploit

    Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. …

  • Unscored —
    CVE-2006-5320 Public exploit

    Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2006-5314 Public exploit

    PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-5317 Public exploit

    PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-5316 Public exploit

    registroTL stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2006-5310 Public exploit

    PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0…

  • Unscored —
    CVE-2006-5309 Public exploit

    PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and …

  • Unscored —
    CVE-2006-5312 Public exploit

    PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows …

  • Unscored —
    CVE-2006-5311 Public exploit

    PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attac…

  • Unscored —
    CVE-2006-5302 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5306 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allo…

  • Unscored —
    CVE-2006-5308 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers…

  • Unscored —
    CVE-2006-5305 Public exploit

    PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote atta…

  • Unscored —
    CVE-2006-5307 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-5301 Public exploit

    PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for ph…

  • Unscored —
    CVE-2006-5304 Public exploit

    PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-4182 Public exploit EPSS 21%

    Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a deni…

  • Unscored —
    CVE-2006-5210 Public exploit

    Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2006-5295 Public exploit EPSS 11%

    Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning servic…

  • Unscored —
    CVE-2006-5296 Public exploit EPSS 27%

    PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record…

  • Unscored —
    CVE-2006-5291 Public exploit

    PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows r…

  • Unscored —
    CVE-2006-5294 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-5292 Public exploit

    PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attac…

  • Unscored —
    CVE-2006-5289 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5281 Public exploit

    PHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-5283 Public exploit

    PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2006-5282 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5284 Public exploit

    PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and ea…

  • Unscored —
    CVE-2006-5259 Public exploit

    PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5263 Public exploit

    Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-5256 Public exploit

    PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remot…

  • Unscored —
    CVE-2006-5261 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5254 Public exploit

    PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration …

  • Unscored —
    CVE-2006-5251 Public exploit

    PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-5262 Public exploit

    CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticate…

  • Unscored —
    CVE-2006-5257 Public exploit

    PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0…

  • Unscored —
    CVE-2006-4842 Public exploit

    The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment …

  • Unscored —
    CVE-2006-4516 Public exploit

    Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and …