Skip to content
OpenAdvisories

Archive

4 December 2006

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6280 Public exploit

    SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-6281 Public exploit

    PHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote attackers to execute …

  • Unscored —
    CVE-2006-6247 Public exploit

    Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-6243 Public exploit

    Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-6288 Public exploit

    Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2006-6255 Public exploit

    Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is a…

  • Unscored —
    CVE-2006-6251 Public exploit EPSS 68%

    Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long s…

  • Unscored —
    CVE-2006-6254 Public exploit

    administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) …

  • Unscored —
    CVE-2006-6277 Public exploit

    Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2006-6250 Public exploit

    Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2006-6272 Public exploit

    Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-6284 Public exploit

    Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to inclu…

  • Unscored —
    CVE-2006-6287 Public exploit EPSS 10%

    Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long p…

  • Unscored —
    CVE-2006-6261 Public exploit

    Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cr…