| Max CVSS | 9.3 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-2305 | 7.5 |
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
|
11-10-2017 - 01:32 | 26-04-2007 - 21:19 | |
| CVE-2006-2274 | 5.0 |
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is
|
11-10-2017 - 01:30 | 09-05-2006 - 20:02 | |
| CVE-2009-3116 | 7.5 |
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action.
|
19-09-2017 - 01:29 | 09-09-2009 - 22:30 | |
| CVE-2009-3717 | 9.3 |
Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file.
|
19-09-2017 - 01:29 | 16-10-2009 - 16:30 | |
| CVE-2009-3259 | 7.5 |
Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_N
|
17-08-2017 - 01:31 | 18-09-2009 - 21:30 | |
| CVE-2009-3255 | 6.8 |
SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI.
|
17-08-2017 - 01:31 | 18-09-2009 - 20:30 | |
| CVE-2009-3081 | 7.5 |
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained sole
|
17-08-2017 - 01:31 | 04-09-2009 - 20:30 | |
| CVE-2004-2026 | 7.5 |
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 |