Skip to content
OpenAdvisories

Archive

10 December 2006

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6453 Public exploit

    PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated…

  • Unscored —
    CVE-2006-6447 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-6445 Public exploit

    Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2006-6451 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject …

  • Unscored —
    CVE-2006-6446 Public exploit

    SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote …

  • Unscored —
    CVE-2006-6383 Public exploit

    PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null …

  • Unscored —
    CVE-2006-6379 Public exploit EPSS 21%

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1…

  • Unscored —
    CVE-2006-6417 Public exploit

    PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allow…

  • Unscored —
    CVE-2006-6421 Public exploit EPSS 16%

    Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows …

  • Unscored —
    CVE-2006-6416 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to exec…

  • Unscored —
    CVE-2006-6332 Public exploit EPSS 21%

    Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execu…

  • Unscored —
    CVE-2006-6426 Public exploit

    PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_gl…

  • Unscored —
    CVE-2006-6414 Public exploit

    Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-6410 Public exploit

    Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb pa…