Skip to content
OpenAdvisories

Archive

14 December 2006

Vulnerabilities first published on this day (UTC), newest first.

25 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6551 Public exploit

    PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tuc…

  • Unscored —
    CVE-2006-6560 Public exploit

    PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) P…

  • Unscored —
    CVE-2006-6561 Public exploit EPSS 43%

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2006-6553 Public exploit

    PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allow…

  • Unscored —
    CVE-2006-6550 Public exploit

    PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-6558 Public exploit

    Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in…

  • Unscored —
    CVE-2006-6552 Public exploit

    PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote…

  • Unscored —
    CVE-2006-6559 Public exploit

    SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute …

  • Unscored —
    CVE-2006-6543 Public exploit

    Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute…

  • Unscored —
    CVE-2006-6538 Public exploit

    D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of…

  • Unscored —
    CVE-2006-6536 Public exploit

    Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-6544 Public exploit

    Cross-site scripting (XSS) vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML vi…

  • Unscored —
    CVE-2006-6542 Public exploit

    SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-6545 Public exploit

    PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_e…

  • Unscored —
    CVE-2006-6546 Public exploit

    PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork (CN:AJ) 167f and earlier allows remote…

  • Unscored —
    CVE-2006-6516 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-6523 Public exploit

    Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inje…

  • Unscored —
    CVE-2006-6519 Public exploit

    SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6520 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-6526 Public exploit

    PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2006-6524 Public exploit

    SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-6517 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-6521 Public exploit

    SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-6525 Public exploit

    SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-6518 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web scrip…