| Max CVSS | 9.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0677 | 7.8 |
telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a null dereference.
|
19-10-2018 - 15:45 | 14-02-2006 - 11:06 | |
| CVE-2006-4373 | 7.5 |
PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.
|
17-10-2018 - 21:36 | 26-08-2006 - 21:04 | |
| CVE-2007-1514 | 6.8 |
PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter.
|
16-10-2018 - 16:38 | 20-03-2007 - 10:19 | |
| CVE-2007-5582 | 4.3 |
Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified
|
15-10-2018 - 21:45 | 15-12-2007 - 01:46 | |
| CVE-2008-4726 | 9.0 |
Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the (1) open (aka SSH_FXP_OPEN), (2) unlink, (3) opendir, and other unspecified parameters.
|
11-10-2018 - 20:52 | 24-10-2008 - 00:00 | |
| CVE-2008-4732 | 7.5 |
SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.
|
11-10-2018 - 20:52 | 24-10-2008 - 10:30 | |
| CVE-2008-4733 | 4.3 |
Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) se
|
11-10-2018 - 20:52 | 24-10-2008 - 10:30 | |
| CVE-2008-4727 | 4.3 |
Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultan
|
11-10-2018 - 20:52 | 24-10-2008 - 00:00 | |
| CVE-2008-4734 | 7.5 |
Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidd
|
11-10-2018 - 20:52 | 24-10-2008 - 10:30 | |
| CVE-2008-4708 | 7.5 |
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4714 | 7.5 |
Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4718 | 7.5 |
Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter, a different vector than CVE-2006-215
|
29-09-2017 - 01:32 | 23-10-2008 - 20:00 | |
| CVE-2008-4642 | 7.5 |
SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.
|
29-09-2017 - 01:32 | 21-10-2008 - 18:42 | |
| CVE-2008-4707 | 5.0 |
Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directories via a .. (dot dot) in the lien_2 parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4709 | 7.5 |
SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2010-4915 | 7.5 |
SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.
|
29-08-2017 - 01:29 | 08-10-2011 - 10:55 |