| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3924 | 7.5 |
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters.
|
14-02-2024 - 01:17 | 30-11-2005 - 11:03 | |
| CVE-2013-3215 | 7.5 |
vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.
|
31-01-2020 - 19:54 | 29-01-2020 - 18:15 | |
| CVE-2017-14182 | 4.0 |
A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API.
|
31-10-2017 - 21:13 | 27-10-2017 - 13:29 | |
| CVE-2011-5065 | 4.3 |
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.
|
29-08-2017 - 01:30 | 15-01-2012 - 03:55 | |
| CVE-2008-4520 | 4.3 |
Cross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter.
|
08-08-2017 - 01:32 | 09-10-2008 - 18:14 | |
| CVE-2004-2759 | 2.1 |
Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files.
|
08-08-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2005-3843 | 7.5 |
SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
|
11-07-2017 - 01:33 | 26-11-2005 - 22:03 | |
| CVE-2005-3877 | 7.5 |
Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list.php and (2) mid parameter in a view action to mess
|
07-02-2012 - 05:00 | 29-11-2005 - 11:03 | |
| CVE-2005-3873 | 7.5 |
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter.
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-3842 | 7.5 |
SQL injection vulnerability in index.php in pdjk-support suite 1.1a and earlier allows remote attackers to execute arbitrary SQL commands via the (1) rowstart, (2) news_id, and (3) faq_id parameters.
|
08-03-2011 - 02:27 | 26-11-2005 - 22:03 | |
| CVE-2005-3871 | 7.5 |
Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php,
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-3874 | 7.5 |
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the p_entry parameter in an entry command to index.php.
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-3876 | 7.5 |
Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang parameters.
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-3872 | 7.5 |
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID parameter in forum.php, and the (2) TOPIC_ID, (3) FORUM_ID, and (4) CAT_ID parameters in topic.php.
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-4027 | 7.5 |
SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
|
20-09-2008 - 04:41 | 05-12-2005 - 11:03 | |
| CVE-2006-6580 | 6.4 |
admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts. NOTE: the provenance of this information is u
|
05-09-2008 - 21:15 | 15-12-2006 - 19:28 | |
| CVE-2000-0751 | 7.5 |
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |