Skip to content
OpenAdvisories

Archive

27 December 2006

Vulnerabilities first published on this day (UTC), newest first.

33 results · Feed

  • Unscored —

    Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backen…

  • Unscored —
    CVE-2006-6775 Public exploit

    acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) …

  • Unscored —
    CVE-2006-6774 Public exploit

    PHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members/maquetacion_member.php) in Ciberia Con…

  • Unscored —
    CVE-2006-6771 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-6770 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is e…

  • Unscored —
    CVE-2006-6773 Public exploit

    pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users b…

  • Unscored —
    CVE-2006-6768 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow r…

  • Unscored —
    CVE-2006-6764 Public exploit

    PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP th…

  • Unscored —
    CVE-2006-6763 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to e…

  • Unscored —

    The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of serv…

  • Unscored —
    CVE-2006-6761 Public exploit EPSS 53%

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …

  • Unscored —
    CVE-2006-6765 Public exploit

    Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execu…

  • Unscored —

    Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —

    Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) charact…

  • Unscored —
    CVE-2006-6760 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attacke…

  • Unscored —

    Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the s…

  • Unscored —
    CVE-2006-6757 Public exploit

    Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and s…

  • Unscored —
    CVE-2006-6758 Public exploit

    Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot d…

  • Unscored —
    CVE-2006-6425 Public exploit EPSS 58%

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …

  • Unscored —
    CVE-2006-6759 Public exploit

    A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2006-6424 Public exploit EPSS 60%

    Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by a…

  • Unscored —
    CVE-2006-6755 Public exploit

    Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/i…

  • Unscored —
    CVE-2006-6756 Public exploit

    The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.…

  • Unscored —

    PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-6746 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-6747 Public exploit

    SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6751 Public exploit

    Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-6752 Public exploit

    Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenan…

  • Unscored —

    Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown i…

  • Unscored —
    CVE-2006-6750 Public exploit

    Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2003-1314 Public exploit

    PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers t…

  • Unscored —
    CVE-2003-1313 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attacke…