Skip to content
OpenAdvisories

Archive

November 2006

Vulnerabilities first published in this month (UTC), newest first.

226 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5958 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-5961 Public exploit

    Buffer overflow in Mercury Mail Transport System 4.01b for Windows has unknown impact and attack vectors, as originally…

  • Unscored —
    CVE-2006-5957 Public exploit

    Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-5951 Public exploit

    PHP remote file inclusion vulnerability in pipe.php in Exophpdesk 1.2 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-5954 Public exploit

    SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-5952 Public exploit

    SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-5946 Public exploit

    SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2006-5948 Public exploit

    PHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5943 Public exploit

    Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager al…

  • Unscored —
    CVE-2006-5945 Public exploit

    Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-5944 Public exploit

    Cross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager (CSM) allows remote att…

  • Unscored —
    CVE-2006-5934 Public exploit

    SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-5936 Public exploit

    SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-5928 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-5930 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlie…

  • Unscored —
    CVE-2006-5925 Public exploit

    Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2006-5899 Public exploit

    PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5910 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execu…

  • Unscored —
    CVE-2006-5919 Public exploit

    PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.…

  • Unscored —
    CVE-2006-5923 Public exploit

    PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 an…

  • Unscored —
    CVE-2006-5924 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to in…

  • Unscored —
    CVE-2006-5920 Public exploit

    PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execu…

  • Unscored —
    CVE-2006-5911 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute …

  • Unscored —
    CVE-2006-5914 Public exploit

    SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-5918 Public exploit

    Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows re…

  • Unscored —
    CVE-2006-5915 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-4688 Public exploit EPSS 76%

    Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 a…

  • Unscored —
    CVE-2006-5887 Public exploit

    SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5885 Public exploit

    SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-5890 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5893 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to exe…

  • Unscored —
    CVE-2006-5895 Public exploit

    PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5888 Public exploit

    SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5894 Public exploit

    Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2006-5886 Public exploit

    SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows re…

  • Unscored —
    CVE-2006-5889 Public exploit

    SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-5891 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5892 Public exploit

    SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-4691 Public exploit EPSS 80%

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft W…

  • Unscored —
    CVE-2006-5198 Public exploit EPSS 62%

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before bui…