Skip to content
OpenAdvisories

Archive

December 2006

Vulnerabilities first published in this month (UTC), newest first.

279 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6789 Public exploit

    PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Phpbbxtra 2.0 allows remote attackers …

  • Unscored —
    CVE-2006-6793 Public exploit

    PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-6775 Public exploit

    acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) …

  • Unscored —
    CVE-2006-6774 Public exploit

    PHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members/maquetacion_member.php) in Ciberia Con…

  • Unscored —
    CVE-2006-6771 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, a…

  • Unscored —
    CVE-2006-6770 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is e…

  • Unscored —
    CVE-2006-6773 Public exploit

    pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users b…

  • Unscored —
    CVE-2006-6768 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow r…

  • Unscored —
    CVE-2006-6764 Public exploit

    PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP th…

  • Unscored —
    CVE-2006-6763 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to e…

  • Unscored —
    CVE-2006-6761 Public exploit EPSS 53%

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …

  • Unscored —
    CVE-2006-6765 Public exploit

    Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execu…

  • Unscored —
    CVE-2006-6760 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attacke…

  • Unscored —
    CVE-2006-6757 Public exploit

    Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and s…

  • Unscored —
    CVE-2006-6758 Public exploit

    Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot d…

  • Unscored —
    CVE-2006-6425 Public exploit EPSS 58%

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …

  • Unscored —
    CVE-2006-6759 Public exploit

    A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2006-6424 Public exploit EPSS 60%

    Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by a…

  • Unscored —
    CVE-2006-6755 Public exploit

    Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/i…

  • Unscored —
    CVE-2006-6756 Public exploit

    The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.…

  • Unscored —
    CVE-2006-6746 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-6747 Public exploit

    SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6751 Public exploit

    Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-6752 Public exploit

    Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenan…

  • Unscored —
    CVE-2006-6750 Public exploit

    Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2003-1314 Public exploit

    PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers t…

  • Unscored —
    CVE-2003-1313 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attacke…

  • Unscored —
    CVE-2006-6739 Public exploit

    PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-6740 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-6732 Public exploit

    PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-6734 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.…

  • Unscored —
    CVE-2006-6733 Public exploit

    Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to i…

  • Unscored —
    CVE-2006-6741 Public exploit

    Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary mess…

  • Unscored —
    CVE-2006-6738 Public exploit

    PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-6729 Public exploit

    Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-6726 Public exploit

    PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to exe…

  • Unscored —
    CVE-2006-6724 Public exploit

    BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of serv…

  • Unscored —
    CVE-2006-6723 Public exploit EPSS 37%

    The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-6719 Public exploit

    The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause…

  • Unscored —
    CVE-2006-6716 Public exploit

    SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote att…