| Max CVSS | 10.0 | Min CVSS | 4.4 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-2104 | 5.0 |
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.
|
30-10-2018 - 16:26 | 31-12-2004 - 05:00 | |
| CVE-2007-0951 | 7.5 |
SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
16-10-2018 - 16:35 | 15-02-2007 - 02:28 | |
| CVE-2007-1640 | 10.0 |
Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to (1) language.php and (2) phpadmin/survey.php.
|
11-10-2017 - 01:31 | 23-03-2007 - 23:19 | |
| CVE-2007-1703 | 7.5 |
SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
|
11-10-2017 - 01:31 | 27-03-2007 - 01:19 | |
| CVE-2007-1620 | 10.0 |
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SITE_PATH] parameter to (a) wind/help.php or (b) wind/about.php, or the (2) _SES
|
11-10-2017 - 01:31 | 23-03-2007 - 00:19 | |
| CVE-2008-6542 | 4.6 |
Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown
|
17-08-2017 - 01:29 | 30-03-2009 - 01:30 | |
| CVE-2007-4206 | 4.4 |
Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certain upgrade scenarios, which might allow local users to gain privileges.
|
29-07-2017 - 01:32 | 08-08-2007 - 02:17 | |
| CVE-2007-3193 | 10.0 |
lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certai
|
29-07-2017 - 01:32 | 12-06-2007 - 23:30 | |
| CVE-2007-3502 | 7.5 |
Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories.
|
29-07-2017 - 01:32 | 30-06-2007 - 01:30 |