Skip to content
OpenAdvisories

Archive

15 November 2006

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —
    CVE-2006-5925 Public exploit

    Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2006-5899 Public exploit

    PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5910 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execu…

  • Unscored —

    Rahul Jonna Gmail File Space (GSpace) allows remote attackers to perform virtual filesystem actions via e-mail messages…

  • Unscored —

    SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 a…

  • Unscored —

    Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admi…

  • Unscored —
    CVE-2006-5919 Public exploit

    PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.…

  • Unscored —

    Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary…

  • Unscored —

    Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Securi…

  • Unscored —

    Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to app…

  • Unscored —

    viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages wi…

  • Unscored —

    Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which…

  • Unscored —

    Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Ano…

  • Unscored —
    CVE-2006-5923 Public exploit

    PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 an…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Ze…

  • Unscored —
    CVE-2006-5924 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to in…

  • Unscored —
    CVE-2006-5920 Public exploit

    PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execu…

  • Unscored —

    PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (a…

  • Unscored —

    generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in add_comment.php in Wheatblog (wB) allow remote attackers to inje…

  • Unscored —

    index.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain values of the postPtr[]…

  • Unscored —
    CVE-2006-5911 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute …

  • Unscored —

    Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected…

  • Unscored —
    CVE-2006-5914 Public exploit

    SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-5918 Public exploit

    Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows re…

  • Unscored —
    CVE-2006-5915 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbi…

  • Unscored —

    Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote atta…