Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

235 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5239 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-5250 Public exploit

    PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows…

  • Unscored —
    CVE-2006-5243 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabl…

  • Unscored —
    CVE-2006-5249 Public exploit

    PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remo…

  • Unscored —
    CVE-2006-5240 Public exploit

    PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enab…

  • Unscored —
    CVE-2006-5244 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enab…

  • Unscored —
    CVE-2006-5241 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is e…

  • Unscored —
    CVE-2006-5236 Public exploit

    SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-5234 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2006-5232 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5230 Public exploit

    PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2006-5229 Public exploit EPSS 59%

    OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configuration…

  • Unscored —
    CVE-2006-5224 Public exploit

    PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 i…

  • Unscored —
    CVE-2006-5228 Public exploit

    Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 a…

  • Unscored —
    CVE-2006-5221 Public exploit

    Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-5223 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tr…

  • Unscored —
    CVE-2006-5222 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to ex…

  • Unscored —
    CVE-2006-5226 Public exploit

    PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote atta…

  • Unscored —
    CVE-2006-5219 Public exploit

    SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-5220 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote atta…

  • Unscored —
    CVE-2006-5217 Public exploit

    SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-5216 Public exploit EPSS 64%

    Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2006-5208 Public exploit

    Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-5209 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 …

  • Unscored —
    CVE-2006-5205 Public exploit EPSS 11%

    Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (d…

  • Unscored —
    CVE-2006-5207 Public exploit

    PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is …

  • Unscored —
    CVE-2006-5206 Public exploit

    SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-4812 Public exploit EPSS 21%

    Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argum…

  • Unscored —
    CVE-2006-5202 Public exploit

    Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote atta…

  • Unscored —
    CVE-2006-5196 Public exploit

    The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (d…

  • Unscored —
    CVE-2006-5143 Public exploit EPSS 79%

    Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve …

  • Unscored —
    CVE-2006-5189 Public exploit

    PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allow…

  • Unscored —
    CVE-2006-5191 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for…

  • Unscored —
    CVE-2006-5193 Public exploit

    PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-5182 Public exploit

    PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote at…

  • Unscored —
    CVE-2006-5190 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers …

  • Unscored —
    CVE-2006-5192 Public exploit

    PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5186 Public exploit

    PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is e…

  • Unscored —
    CVE-2006-5187 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows …

  • Unscored —
    CVE-2006-5181 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute a…