| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-2534 | 7.5 |
Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the (1) ADMIN_USER (USER) and (2) ADMIN_PASS (PASS) parameters during a login. NOTE: CVE disputes this vulnerability, since AD
|
25-09-2024 - 16:35 | 09-05-2007 - 00:19 | |
| CVE-2007-2579 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or (3) form[search_term] paramete
|
16-10-2018 - 16:44 | 09-05-2007 - 21:19 | |
| CVE-2007-2577 | 7.5 |
Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/list/index.php or (b) certain news/details/id_*/action
|
16-10-2018 - 16:44 | 09-05-2007 - 21:19 | |
| CVE-2007-2578 | 7.5 |
Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parameter.
|
16-10-2018 - 16:44 | 09-05-2007 - 21:19 | |
| CVE-2007-2555 | 4.3 |
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue
|
16-10-2018 - 16:44 | 09-05-2007 - 17:19 | |
| CVE-2006-0961 | 7.5 |
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the
|
19-10-2017 - 01:29 | 02-03-2006 - 23:02 | |
| CVE-2007-2560 | 5.0 |
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rubrik parameter.
|
11-10-2017 - 01:32 | 09-05-2007 - 18:19 | |
| CVE-2004-2754 | 7.5 |
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
|
05-09-2008 - 20:45 | 31-12-2004 - 05:00 |