Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2001-0596 | 7.5 |
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
|
10-10-2017 - 01:29 | 02-08-2001 - 04:00 | |
CVE-2009-2593 | 7.5 |
SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action.
|
19-09-2017 - 01:29 | 24-07-2009 - 16:30 | |
CVE-2009-3543 | 7.5 |
SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute arbitrary SQL commands via the user parameter (aka the login name).
|
19-09-2017 - 01:29 | 02-10-2009 - 19:30 | |
CVE-2009-3528 | 6.5 |
SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action.
|
19-09-2017 - 01:29 | 02-10-2009 - 19:30 | |
CVE-2009-3713 | 7.5 |
SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string.
|
19-09-2017 - 01:29 | 16-10-2009 - 16:30 | |
CVE-2009-4752 | 7.5 |
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter.
|
17-08-2017 - 01:31 | 26-03-2010 - 20:30 | |
CVE-2009-4750 | 6.8 |
PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
|
17-08-2017 - 01:31 | 26-03-2010 - 20:30 | |
CVE-2009-4877 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
|
17-08-2017 - 01:31 | 26-05-2010 - 18:30 | |
CVE-2009-4751 | 7.5 |
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.
|
17-08-2017 - 01:31 | 26-03-2010 - 20:30 | |
CVE-2009-2595 | 4.3 |
Cross-site scripting (XSS) vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action.
|
17-08-2017 - 01:30 | 24-07-2009 - 16:30 |