| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1863 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter
|
29-04-2021 - 15:15 | 31-12-2004 - 05:00 | |
| CVE-2008-6332 | 7.5 |
SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
|
29-09-2017 - 01:33 | 27-02-2009 - 16:30 | |
| CVE-2008-6326 | 7.5 |
SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained so
|
17-08-2017 - 01:29 | 27-02-2009 - 11:30 | |
| CVE-2006-1913 | 6.8 |
Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
20-07-2017 - 01:31 | 20-04-2006 - 18:06 | |
| CVE-2002-1059 | 7.5 |
Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
|
18-10-2016 - 02:23 | 04-10-2002 - 04:00 | |
| CVE-2008-5108 | 6.8 |
Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.
|
31-10-2012 - 03:06 | 17-11-2008 - 22:21 | |
| CVE-2009-1695 | 4.3 |
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to
|
17-02-2011 - 06:43 | 10-06-2009 - 18:00 |