| Max CVSS | 10.0 | Min CVSS | 3.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1205 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable
|
18-10-2018 - 16:31 | 14-03-2006 - 01:06 | |
| CVE-2007-3252 | 7.8 |
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786.
|
16-10-2018 - 16:48 | 18-06-2007 - 10:30 | |
| CVE-2007-3083 | 7.8 |
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb.
|
16-10-2018 - 16:47 | 06-06-2007 - 10:30 | |
| CVE-2007-1423 | 9.3 |
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and certain other PHP scripts. Success
|
19-10-2017 - 01:30 | 13-03-2007 - 01:19 | |
| CVE-2012-3128 | 3.7 |
Unspecified vulnerability in Oracle SPARC T-Series Servers running System Firmware 8.2.0 and 8.1.4.e or earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Integrated Lights Out Manager.
|
29-08-2017 - 01:31 | 17-07-2012 - 23:55 | |
| CVE-2010-1712 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obt
|
17-08-2017 - 01:32 | 04-05-2010 - 16:00 | |
| CVE-2007-2780 | 5.0 |
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message.
|
29-07-2017 - 01:31 | 21-05-2007 - 23:30 | |
| CVE-2004-0300 | 10.0 |
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_br
|
11-07-2017 - 01:30 | 23-11-2004 - 05:00 |