Max CVSS 7.5 Min CVSS 4.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2006-1397 4.3
Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handl
18-10-2018 - 16:32 28-03-2006 - 11:06
CVE-2006-4988 4.3
Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter in example-view/inc/print_butt
17-10-2018 - 21:40 26-09-2006 - 02:07
CVE-2006-4989 5.0
Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functions/admin/all.php, (3) functions/admin/init_session.php, (4) functions/all.php, and (5) certain files in example-
17-10-2018 - 21:40 26-09-2006 - 02:07
CVE-2006-4987 7.5
Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globals[content_dir] parameter in (1) example-view/templates/article.php, (2) example-view/template
17-10-2018 - 21:40 26-09-2006 - 02:07
CVE-2007-2331 7.5
PHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang_list parameter.
16-10-2018 - 16:43 27-04-2007 - 00:19
CVE-2008-0688 4.3
Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.
15-10-2018 - 22:02 12-02-2008 - 01:00
CVE-2008-5218 5.0
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.
29-09-2017 - 01:32 25-11-2008 - 18:30
Back to Top Mark selected
Back to Top