| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3313 | 2.6 |
Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter.
|
14-02-2024 - 01:17 | 29-06-2006 - 19:05 | |
| CVE-2006-5162 | 5.0 |
wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header, which triggers a stack overflow.
|
13-12-2021 - 18:51 | 05-10-2006 - 04:04 | |
| CVE-2006-5161 | 6.4 |
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5144 | 6.8 |
Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5153 | 5.0 |
The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtS
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5145 | 7.5 |
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5168 | 4.3 |
Cross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string.
|
17-10-2018 - 21:41 | 10-10-2006 - 04:06 | |
| CVE-2006-5157 | 5.1 |
Format string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan Corporate Edition (OSCE) before 7.3 Patch 1 allows remote attackers to execute arbitrary code via format string identifiers in the "Management Console's Remo
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5151 | 10.0 |
Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5163 | 3.6 |
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5166 | 7.5 |
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to execute arbitrary PHP code via a URL in the s[phppath] parameter.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5164 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2007-0402 | 6.8 |
Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter.
|
16-10-2018 - 16:32 | 22-01-2007 - 18:28 | |
| CVE-2007-0403 | 7.5 |
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
|
16-10-2018 - 16:32 | 22-01-2007 - 18:28 | |
| CVE-2007-5089 | 7.5 |
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.
|
15-10-2018 - 21:40 | 26-09-2007 - 20:17 | |
| CVE-2011-1546 | 7.5 |
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated adminis
|
09-10-2018 - 19:31 | 04-04-2011 - 12:27 | |
| CVE-2008-3718 | 6.5 |
Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profile.php.
|
29-09-2017 - 01:31 | 20-08-2008 - 16:41 | |
| CVE-2005-3649 | 2.6 |
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
|
18-10-2016 - 03:36 | 17-11-2005 - 11:02 |