| Max CVSS | 9.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4687 | 9.0 |
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.
|
13-05-2018 - 01:29 | 22-10-2008 - 18:00 | |
| CVE-2001-1114 | 7.5 |
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.
|
19-12-2017 - 02:29 | 13-08-2001 - 04:00 | |
| CVE-2008-6805 | 6.8 |
Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site par
|
29-09-2017 - 01:33 | 11-05-2009 - 20:30 | |
| CVE-2008-4605 | 7.5 |
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4600 | 7.5 |
configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4632 | 6.8 |
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the (1) post and (2) doc parameters.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4606 | 7.5 |
Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) location_id parameter to locationdel.php and (2) vlan_id parameter to vlanedit.php. NOTE: the vlanview.php and vlan
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4729 | 6.8 |
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code executio
|
29-09-2017 - 01:32 | 24-10-2008 - 00:00 | |
| CVE-2008-4604 | 7.5 |
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4599 | 7.5 |
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2005-1163 | 6.4 |
Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data.
|
12-07-2017 - 01:29 | 02-05-2005 - 04:00 | |
| CVE-2016-3025 | 5.0 |
IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
|
28-11-2016 - 20:05 | 25-11-2016 - 03:59 |