| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-5095 | 7.5 |
PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter. NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined befor
|
07-08-2024 - 20:15 | 29-09-2006 - 21:07 | |
| CVE-2006-5097 | 7.5 |
PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE: this issue has been disputed by a third party rese
|
07-08-2024 - 20:15 | 29-09-2006 - 21:07 | |
| CVE-2006-5088 | 7.5 |
PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter.
|
14-02-2024 - 01:17 | 29-09-2006 - 20:07 | |
| CVE-2011-1167 | 6.8 |
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSamp
|
13-02-2023 - 01:19 | 28-03-2011 - 16:55 | |
| CVE-2005-3529 | 5.0 |
tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.
|
19-10-2018 - 15:36 | 20-11-2005 - 22:03 | |
| CVE-2006-3292 | 7.5 |
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field).
|
18-10-2018 - 16:46 | 28-06-2006 - 23:05 | |
| CVE-2006-5074 | 5.1 |
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter.
|
17-10-2018 - 21:41 | 29-09-2006 - 00:07 | |
| CVE-2006-5076 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php.
|
17-10-2018 - 21:41 | 29-09-2006 - 00:07 | |
| CVE-2006-5081 | 7.5 |
PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
|
17-10-2018 - 21:41 | 29-09-2006 - 00:07 | |
| CVE-2006-5096 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid
|
17-10-2018 - 21:41 | 29-09-2006 - 21:07 | |
| CVE-2006-5086 | 6.4 |
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters. NOTE: this issue was claimed to be SQL injection by the o
|
17-10-2018 - 21:41 | 29-09-2006 - 00:07 | |
| CVE-2006-5085 | 7.5 |
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
|
17-10-2018 - 21:41 | 29-09-2006 - 00:07 | |
| CVE-2006-5100 | 7.5 |
PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2006-5101 | 7.5 |
PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guest
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2007-0251 | 7.8 |
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive informa
|
16-10-2018 - 16:32 | 16-01-2007 - 23:28 | |
| CVE-2007-5060 | 4.3 |
Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password_ and rpassword_ parameters, possibly related to timestamp va
|
15-10-2018 - 21:40 | 24-09-2007 - 22:17 | |
| CVE-2008-3713 | 7.5 |
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the pro_id parameter.
|
29-09-2017 - 01:31 | 19-08-2008 - 19:41 |