| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6671 | 7.5 |
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Password parameter, a different product than CVE-2006-6021. NOTE: some of these details are obtained from
|
15-10-2018 - 21:56 | 08-01-2008 - 11:46 | |
| CVE-2007-6646 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to
|
15-10-2018 - 21:55 | 04-01-2008 - 01:46 | |
| CVE-2007-6651 | 5.0 |
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_url parameter.
|
15-10-2018 - 21:55 | 04-01-2008 - 11:46 | |
| CVE-2001-0333 | 7.5 |
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
|
12-10-2018 - 21:30 | 27-06-2001 - 04:00 | |
| CVE-2008-5317 | 10.0 |
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted impr
|
03-10-2018 - 21:56 | 03-12-2008 - 17:30 | |
| CVE-2018-2583 | 6.8 |
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Stored Procedure). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with networ
|
28-03-2018 - 01:29 | 18-01-2018 - 02:29 | |
| CVE-2007-1105 | 5.0 |
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
|
11-10-2017 - 01:31 | 26-02-2007 - 17:28 | |
| CVE-2005-0413 | 7.5 |
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpas
|
11-10-2017 - 01:29 | 27-04-2005 - 04:00 | |
| CVE-2008-5316 | 10.0 |
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the in
|
29-09-2017 - 01:32 | 03-12-2008 - 17:30 | |
| CVE-2007-6639 | 7.5 |
SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action.
|
29-09-2017 - 01:30 | 04-01-2008 - 01:46 | |
| CVE-2007-6663 | 7.5 |
SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) 2.0.3, 2.1.2, and 2.1.3 Beta component for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter
|
29-09-2017 - 01:30 | 04-01-2008 - 11:46 | |
| CVE-2007-6667 | 6.8 |
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413.
|
29-09-2017 - 01:30 | 04-01-2008 - 11:46 | |
| CVE-2007-6666 | 7.5 |
SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter.
|
29-09-2017 - 01:30 | 04-01-2008 - 11:46 | |
| CVE-2007-6665 | 7.5 |
SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL commands via the txtLoginID parameter.
|
29-09-2017 - 01:30 | 04-01-2008 - 11:46 | |
| CVE-2007-6664 | 7.5 |
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter.
|
29-09-2017 - 01:30 | 04-01-2008 - 11:46 | |
| CVE-2016-1464 | 9.3 |
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375.
|
03-09-2017 - 01:29 | 03-09-2016 - 20:59 | |
| CVE-2012-1834 | 4.3 |
Cross-site scripting (XSS) vulnerability in the cms_tpv_admin_head function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cms_tpv_view parameter to
|
29-08-2017 - 01:31 | 07-04-2014 - 15:55 |