| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2208 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters.
|
14-02-2024 - 01:17 | 05-05-2006 - 12:46 | |
| CVE-2006-2218 | 9.3 |
Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object
|
23-07-2021 - 12:55 | 05-05-2006 - 12:46 | |
| CVE-2004-1352 | 7.2 |
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code.
|
30-10-2018 - 16:26 | 01-12-2004 - 05:00 | |
| CVE-2006-2227 | 4.3 |
Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the req_message parameter, because the value of the redirect_url parameter is not sanitized.
|
18-10-2018 - 16:38 | 05-05-2006 - 19:02 | |
| CVE-2000-0810 | 7.5 |
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.
|
03-05-2018 - 01:29 | 19-12-2000 - 05:00 | |
| CVE-2008-4599 | 7.5 |
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2006-6808 | 6.8 |
Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_des
|
29-07-2017 - 01:29 | 28-12-2006 - 21:28 | |
| CVE-2006-2245 | 6.8 |
PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
|
20-07-2017 - 01:31 | 09-05-2006 - 10:02 | |
| CVE-2006-2206 | 10.0 |
The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.
|
20-07-2017 - 01:31 | 05-05-2006 - 12:46 | |
| CVE-2006-2209 | 6.4 |
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action. NOTE: the provenance
|
20-07-2017 - 01:31 | 05-05-2006 - 12:46 | |
| CVE-2006-2181 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php.
|
20-07-2017 - 01:31 | 04-05-2006 - 12:38 | |
| CVE-2006-2179 | 7.5 |
Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm.
|
20-07-2017 - 01:31 | 04-05-2006 - 12:38 | |
| CVE-2006-2178 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.
|
20-07-2017 - 01:31 | 04-05-2006 - 12:38 | |
| CVE-2006-2176 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) new_input, (2) new_url, or (3) new_name parameter.
|
20-07-2017 - 01:31 | 04-05-2006 - 12:38 | |
| CVE-2012-0314 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1)
|
09-02-2012 - 04:10 | 03-02-2012 - 04:05 | |
| CVE-2006-2182 | 6.4 |
Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter.
|
08-03-2011 - 02:35 | 04-05-2006 - 12:38 |