| Max CVSS | 9.3 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-3695 | 4.3 |
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_sa
|
18-06-2019 - 16:44 | 31-03-2011 - 22:55 | |
| CVE-2006-3299 | 2.6 |
Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML via the group parameter.
|
18-10-2018 - 16:46 | 29-06-2006 - 01:05 | |
| CVE-2006-5241 | 5.1 |
Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_use
|
17-10-2018 - 21:41 | 12-10-2006 - 00:07 | |
| CVE-2006-5223 | 7.5 |
PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path param
|
17-10-2018 - 21:41 | 10-10-2006 - 21:07 | |
| CVE-2006-5220 | 5.1 |
Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplica
|
17-10-2018 - 21:41 | 10-10-2006 - 04:06 | |
| CVE-2006-5226 | 7.5 |
PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.
|
17-10-2018 - 21:41 | 10-10-2006 - 21:07 | |
| CVE-2006-5240 | 5.1 |
PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENV[BASE_ENGINE_LOC] parameter. Successful exploitat
|
17-10-2018 - 21:41 | 12-10-2006 - 00:07 | |
| CVE-2006-5228 | 7.5 |
Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) up_login, (2) up_pass, or (3) up_num_tasks paramete
|
17-10-2018 - 21:41 | 10-10-2006 - 21:07 | |
| CVE-2006-5221 | 7.5 |
Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php.
|
17-10-2018 - 21:41 | 10-10-2006 - 21:07 | |
| CVE-2006-5217 | 7.5 |
SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi (k_a) and Sifre
|
17-10-2018 - 21:41 | 10-10-2006 - 04:06 | |
| CVE-2006-5227 | 6.8 |
Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_reso
|
17-10-2018 - 21:41 | 10-10-2006 - 21:07 | |
| CVE-2007-0390 | 6.8 |
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web script or HTML via the tag parameter.
|
16-10-2018 - 16:32 | 19-01-2007 - 23:28 | |
| CVE-2008-3732 | 9.3 |
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TTA file, which triggers a heap-based bu
|
29-09-2017 - 01:31 | 20-08-2008 - 16:41 | |
| CVE-2005-2630 | 5.1 |
Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.
|
11-07-2017 - 01:32 | 18-11-2005 - 23:03 | |
| CVE-2007-5125 | 5.0 |
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1171. Reason: This candidate is a duplicate of CVE-2007-1171. Notes: All CVE users should reference CVE-2007-1171 instead of this candidate. All references and descriptions in t
|
11-09-2008 - 01:00 | 27-09-2007 - 19:17 |