| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2000-0707 | 7.5 |
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.
|
14-02-2024 - 01:17 | 20-10-2000 - 04:00 | |
| CVE-2005-3883 | 5.0 |
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
|
30-10-2018 - 16:25 | 29-11-2005 - 11:03 | |
| CVE-2005-3861 | 7.5 |
PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.
|
19-10-2018 - 15:39 | 29-11-2005 - 11:03 | |
| CVE-2005-3859 | 7.5 |
PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
|
19-10-2018 - 15:39 | 29-11-2005 - 11:03 | |
| CVE-2005-3860 | 7.5 |
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter.
|
19-10-2018 - 15:39 | 29-11-2005 - 11:03 | |
| CVE-2004-1392 | 5.0 |
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.
|
11-10-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2008-4524 | 7.5 |
SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.
|
29-09-2017 - 01:32 | 09-10-2008 - 18:14 | |
| CVE-2005-3884 | 7.5 |
Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php.
|
20-07-2017 - 01:29 | 29-11-2005 - 11:03 | |
| CVE-2005-3862 | 7.5 |
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.
|
11-07-2017 - 01:33 | 29-11-2005 - 11:03 | |
| CVE-2016-5368 | 7.8 |
Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) packets.
|
28-11-2016 - 20:24 | 30-06-2016 - 16:59 | |
| CVE-2005-3875 | 7.5 |
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in (1) send.php or (2) a delete action in messages.php.
|
08-03-2011 - 02:27 | 29-11-2005 - 11:03 | |
| CVE-2005-3838 | 7.5 |
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parame
|
08-03-2011 - 02:27 | 26-11-2005 - 22:03 | |
| CVE-2005-3827 | 7.5 |
SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
08-03-2011 - 02:27 | 26-11-2005 - 19:03 | |
| CVE-2010-2530 | 4.9 |
Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operati
|
30-09-2010 - 04:00 | 29-09-2010 - 17:00 | |
| CVE-2005-3919 | 4.3 |
Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (2) SendPm.php.
|
05-09-2008 - 20:55 | 30-11-2005 - 11:03 |