Max CVSS 7.5 Min CVSS 4.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2001-0596 7.5
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
10-10-2017 - 01:29 02-08-2001 - 04:00
CVE-2009-2593 7.5
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action.
19-09-2017 - 01:29 24-07-2009 - 16:30
CVE-2009-3543 7.5
SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).
19-09-2017 - 01:29 02-10-2009 - 19:30
CVE-2009-3528 6.5
SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action.
19-09-2017 - 01:29 02-10-2009 - 19:30
CVE-2009-3713 7.5
SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string.
19-09-2017 - 01:29 16-10-2009 - 16:30
CVE-2009-4752 7.5
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter.
17-08-2017 - 01:31 26-03-2010 - 20:30
CVE-2009-4750 6.8
PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
17-08-2017 - 01:31 26-03-2010 - 20:30
CVE-2009-4877 6.8
Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
17-08-2017 - 01:31 26-05-2010 - 18:30
CVE-2009-4751 7.5
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.
17-08-2017 - 01:31 26-03-2010 - 20:30
CVE-2009-2595 4.3
Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action.
17-08-2017 - 01:30 24-07-2009 - 16:30
Back to Top Mark selected
Back to Top