| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-5704 | 7.5 |
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.
|
15-10-2018 - 21:46 | 29-10-2007 - 22:46 | |
| CVE-2012-0745 | 7.2 |
The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.
|
07-12-2017 - 02:29 | 04-05-2012 - 16:55 | |
| CVE-2009-3314 | 7.5 |
SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL commands via the platform parameter.
|
19-09-2017 - 01:29 | 23-09-2009 - 12:08 | |
| CVE-2013-5523 | 4.3 |
The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web s
|
29-08-2017 - 01:33 | 10-10-2013 - 10:55 | |
| CVE-2012-4261 | 7.5 |
SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter.
|
29-08-2017 - 01:32 | 13-08-2012 - 18:55 | |
| CVE-2012-4260 | 7.5 |
Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) dept_nr or (4) pid parameter to modules/importer/myc
|
29-08-2017 - 01:32 | 13-08-2012 - 18:55 | |
| CVE-2012-4262 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maiden parameter to modules/patient/mycare_pid.php; (5)
|
29-08-2017 - 01:32 | 13-08-2012 - 18:55 | |
| CVE-2004-2736 | 5.0 |
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
|
29-07-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2005-2416 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) term parameter to the search module or (2) title in the blog aggregation module.
|
11-07-2017 - 01:32 | 03-08-2005 - 04:00 |