Archive
October 2006
Vulnerabilities first published in this month (UTC), newest first.
551 results · Feed
-
Unscored —CVE-2006-5306 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allo…
-
Unscored —CVE-2006-5308 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers…
-
Unscored —CVE-2006-5305 Public exploit
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote atta…
-
Unscored —
Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database enc…
-
Unscored —CVE-2006-5307 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-5301 Public exploit
PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for ph…
-
Unscored —CVE-2006-5304 Public exploit
PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to…
-
Unscored —
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a deni…
-
Unscored —CVE-2006-5210 Public exploit
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files…
-
Unscored —
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning servic…
-
Unscored —CVE-2006-4154 EPSS 17%
Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbi…
-
Unscored —
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in a…
-
Unscored —
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record…
-
Unscored —
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files h…
-
Unscored —CVE-2006-5291 Public exploit
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows r…
-
Unscored —CVE-2006-5294 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-5292 Public exploit
PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remot…
-
Unscored —
Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-5289 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbi…
-
Unscored —
Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and passwor…
-
Unscored —
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245,…
-
Unscored —CVE-2006-5281 Public exploit
PHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows remote attackers to exe…
-
Unscored —
Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) …
-
Unscored —CVE-2006-5283 Public exploit
PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2006-5282 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitra…
-
Unscored —
SQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote attackers to execute arbi…
-
Unscored —CVE-2006-5284 Public exploit
PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and ea…
-
Unscored —
PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 200…
-
Unscored —
PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execu…
-
Unscored —
PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote …
-
Unscored —CVE-2006-5259 Public exploit
PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary …
-
Unscored —
The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0…
-
Unscored —CVE-2006-5263 Public exploit
Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to in…
-
Unscored —CVE-2006-5256 Public exploit
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remot…
-
Unscored —CVE-2006-5261 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbit…
-
Unscored —
PHP remote file inclusion vulnerability in compteur.php in Compteur 2 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-5254 Public exploit
PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration …
-
Unscored —
PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to …
-
Unscored —CVE-2006-5251 Public exploit
PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP …