| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1278 | 6.8 |
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5)
|
18-10-2018 - 16:31 | 19-03-2006 - 11:06 | |
| CVE-2007-3342 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a malformed SGML numeric character reference with a '\0' (0x00) character in
|
16-10-2018 - 16:48 | 21-06-2007 - 23:30 | |
| CVE-2007-3327 | 5.0 |
httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 (encoded space).
|
16-10-2018 - 16:48 | 21-06-2007 - 18:30 | |
| CVE-2001-0436 | 7.5 |
dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
|
19-12-2017 - 02:29 | 02-07-2001 - 04:00 | |
| CVE-2007-1339 | 7.5 |
SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrary SQL commands via the lcnt parameter.
|
19-10-2017 - 01:30 | 08-03-2007 - 22:19 | |
| CVE-2007-5292 | 4.3 |
Cross-site scripting (XSS) vulnerability in photos.cfm in Directory Image Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the backwardDirectory parameter.
|
29-07-2017 - 01:33 | 09-10-2007 - 18:17 | |
| CVE-2007-4100 | 5.0 |
MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.
|
29-07-2017 - 01:32 | 31-07-2007 - 10:17 | |
| CVE-2007-3837 | 7.8 |
Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service (application crash) via a long CTCP request message containing '%' (percent) characters.
|
29-07-2017 - 01:32 | 17-07-2007 - 22:30 | |
| CVE-2007-3836 | 7.8 |
Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation.
|
29-07-2017 - 01:32 | 17-07-2007 - 22:30 | |
| CVE-2007-4051 | 4.6 |
Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain privileges via a file with a long pathname. NOTE: some of these details are obtained from third party information.
|
29-07-2017 - 01:32 | 30-07-2007 - 16:30 |