Skip to content
OpenAdvisories

Archive

November 2006

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5

    WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, whi…

  • Medium 6.5

    wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary…

  • Medium —

    PHPMailer Local file inclusion

    Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lan…