| Max CVSS | 10.0 | Min CVSS | 4.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-5778 | 6.4 |
Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry
|
14-02-2024 - 15:20 | 01-11-2007 - 16:46 | |
| CVE-2006-1586 | 7.5 |
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter.
|
18-10-2018 - 16:33 | 02-04-2006 - 21:04 | |
| CVE-2007-0608 | 7.1 |
Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to (a) lang/codes-english.php or (b) image.php, which reveal the database name; (2) an invalid GB_DB parameter to index.php, coupled
|
16-10-2018 - 16:33 | 09-05-2007 - 17:19 | |
| CVE-2007-5776 | 5.0 |
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence.
|
15-10-2018 - 21:46 | 01-11-2007 - 16:46 | |
| CVE-2007-5777 | 5.0 |
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb.
|
15-10-2018 - 21:46 | 01-11-2007 - 16:46 | |
| CVE-2008-1751 | 6.8 |
Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) language and (2) lang parameters.
|
29-09-2017 - 01:30 | 11-04-2008 - 21:05 | |
| CVE-2007-5407 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) jcs.function.php; (2)
|
29-09-2017 - 01:29 | 12-10-2007 - 18:17 | |
| CVE-2003-1309 | 10.0 |
The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1310 | 4.6 |
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack").
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 |