| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2001-0507 | 7.2 |
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
|
30-10-2018 - 16:25 | 20-09-2001 - 04:00 | |
| CVE-2008-6437 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part
|
11-10-2018 - 20:57 | 06-03-2009 - 18:30 | |
| CVE-2009-4684 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign parameter.
|
17-08-2017 - 01:31 | 10-03-2010 - 22:30 | |
| CVE-2009-4690 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
|
17-08-2017 - 01:31 | 10-03-2010 - 22:30 | |
| CVE-2009-2888 | 7.5 |
SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter.
|
17-08-2017 - 01:30 | 20-08-2009 - 17:30 | |
| CVE-2009-2889 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter.
|
17-08-2017 - 01:30 | 20-08-2009 - 17:30 | |
| CVE-2009-2587 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to assets/js/ddcart.php, the (2) prefix parameter to includes/ajax/getstate.php, the search pa
|
17-08-2017 - 01:30 | 24-07-2009 - 16:30 |