Skip to content
OpenAdvisories

Archive

10 November 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5839 Public exploit

    PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5850 Public exploit

    Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-5847 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2006-5846 Public exploit EPSS 12%

    Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and inc…

  • Unscored —
    CVE-2006-5853 Public exploit

    Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attacker…

  • Unscored —
    CVE-2006-5841 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, a…

  • Unscored —
    CVE-2006-5851 Public exploit

    openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/ou…

  • Unscored —
    CVE-2006-5849 Public exploit

    PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execu…

  • Unscored —
    CVE-2006-5852 Public exploit

    Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via…

  • Unscored —
    CVE-2006-5825 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject …

  • Unscored —
    CVE-2006-5834 Public exploit

    Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include …

  • Unscored —
    CVE-2006-5832 Public exploit

    All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server …

  • Unscored —
    CVE-2006-5837 Public exploit

    Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows …

  • Unscored —
    CVE-2006-5831 Public exploit

    PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier…

  • Unscored —
    CVE-2006-5829 Public exploit

    Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers t…

  • Unscored —
    CVE-2006-5828 Public exploit

    SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-5838 Public exploit

    PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_…

  • Unscored —
    CVE-2006-5826 Public exploit EPSS 11%

    Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbit…

  • Unscored —
    CVE-2006-5830 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remot…

  • Unscored —
    CVE-2006-5836 Public exploit

    The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows loc…