Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
October

CVEs published in October 2006

546 vulnerabilities, 65 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

tincan phplistMultiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote...CVE-2006-53214.3 MediumOctober 17, 2006
morian album photo sans nomDirectory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote...CVE-2006-5320Public exploit5.0 MediumOctober 17, 2006
toxi foafgenDirectory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read...CVE-2006-5319Public exploit5.0 MediumOctober 17, 2006
nayco jasminePHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows...CVE-2006-5318Public exploit7.5 HighOctober 17, 2006
jhjgubbels eboliPHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute...CVE-2006-5317Public exploit7.5 HighOctober 17, 2006
phplibre registrotlregistroTL stores sensitive information under the web root with insufficient access control,...CVE-2006-5316Public exploit7.8 HighOctober 17, 2006
phplibre registrotlPHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to...CVE-2006-5315Public exploit7.5 HighOctober 17, 2006
phplibre tribunalibrePHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote...CVE-2006-5314Public exploit7.5 HighOctober 17, 2006
hastymailHastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary...CVE-2006-53136.5 MediumOctober 17, 2006
redhat enterprise linuxThe kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to...CVE-2006-43425.5 MediumOctober 17, 2006
phpbb ajax shoutboxPHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier...CVE-2006-5312Public exploit7.5 HighOctober 17, 2006
buzlasPHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1...CVE-2006-5311Public exploit7.5 HighOctober 17, 2006
j-pierre dezelus les visiteurs, phpmyconferences +1 morePHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre...CVE-2006-5310Public exploit6.8 MediumOctober 17, 2006
phpbb prillian frenchPHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the...CVE-2006-5309Public exploit7.5 HighOctober 17, 2006
open conference systems conference systemsMultiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6...CVE-2006-5308Public exploit7.5 HighOctober 17, 2006
afgb guestbookMultiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers...CVE-2006-5307Public exploit7.5 HighOctober 17, 2006
phpbb journals system moduleMultiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and...CVE-2006-5306Public exploit6.8 MediumOctober 17, 2006
phpbb lat2cyrPHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb...CVE-2006-5305Public exploit5.1 MediumOctober 17, 2006
inccms technology corePHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier...CVE-2006-5304Public exploit7.5 HighOctober 17, 2006
securecomputing safeword remoteaccessSecure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal...CVE-2006-53032.1 LowOctober 17, 2006
redaction system systemMultiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote...CVE-2006-5302Public exploitEPSS 15.9%7.5 HighOctober 17, 2006
phpbb spamblockermodPHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and...CVE-2006-5301Public exploit6.8 MediumOctober 17, 2006
hp version control agentUnspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated...CVE-2006-53006.5 MediumOctober 17, 2006
gcontactMultiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote...CVE-2006-52994.3 MediumOctober 17, 2006
clam anti-virus clamavUnspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of...CVE-2006-5295Public exploitFix availableEPSS 11.6%5.0 MediumOctober 16, 2006
ciphertrust ironmailDirectory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers...CVE-2006-5210Public exploit5.0 MediumOctober 16, 2006
clam anti-virus clamavInteger overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote...CVE-2006-4182Public exploitFix availableEPSS 21.8%7.5 HighOctober 16, 2006
muttThe mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify...CVE-2006-5298Fix available1.2 LowOctober 16, 2006
muttRace condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when...CVE-2006-5297Fix available1.2 LowOctober 16, 2006
microsoft powerpointPowerPoint in Microsoft Office 2003 does not properly handle a container object whose position...CVE-2006-5296Public exploitEPSS 27.0%4.3 MediumOctober 16, 2006
apache http serverFormat string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent...CVE-2006-4154EPSS 16.7%6.8 MediumOctober 16, 2006
tincan phplistCross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote...CVE-2006-5294Public exploit4.3 MediumOctober 16, 2006
phpoutsourcing noahs classifiedsCross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3...CVE-2006-52936.8 MediumOctober 16, 2006
exhibit engine enginePHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and...CVE-2006-5292Public exploit7.5 HighOctober 16, 2006
alex downloadenginePHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download...CVE-2006-5291Public exploit7.5 HighOctober 16, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreThe ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and...CVE-2006-52907.5 HighOctober 13, 2006
vtiger crmMultiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote...CVE-2006-5289Public exploit7.5 HighOctober 13, 2006
cisco 2700 wireless location applianceCisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator...CVE-2006-528810.0 HighOctober 13, 2006
xeobookMultiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to...CVE-2006-52875.1 MediumOctober 13, 2006
novell bordermanagerUnspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a...CVE-2006-52865.0 MediumOctober 13, 2006
xeoportSQL injection vulnerability in index.php in XeoPort 0.81, and possibly earlier, allows remote...CVE-2006-52857.5 HighOctober 13, 2006
php news reader news readerPHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader ...CVE-2006-5284Public exploit5.1 MediumOctober 13, 2006
minichatPHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to...CVE-2006-5283Public exploit7.5 HighOctober 13, 2006
sh-newsMultiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote...CVE-2006-5282Public exploit7.5 HighOctober 13, 2006
navyism n at boardPHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows...CVE-2006-5281Public exploit7.5 HighOctober 13, 2006
cuttlefish multimedia ltd. leicestershire communityportalsPHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire...CVE-2006-52806.8 MediumOctober 13, 2006
mysqldumperCross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote...CVE-2006-52646.8 MediumOctober 12, 2006
phpmyagendaDirectory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows...CVE-2006-5263Public exploit7.5 HighOctober 12, 2006
hastymailCRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008...CVE-2006-5262Public exploit6.5 MediumOctober 12, 2006
phpmynewsMultiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote...CVE-2006-5261Public exploit7.5 HighOctober 12, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open