| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3331 | 5.0 |
Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.
|
28-02-2022 - 16:14 | 30-06-2006 - 23:05 | |
| CVE-2006-5520 | 7.5 |
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter.
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5516 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters to wakka.php.
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5517 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5493 | 7.5 |
PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
|
17-10-2018 - 21:43 | 25-10-2006 - 10:07 | |
| CVE-2006-5524 | 6.8 |
Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: This issue might overlap CVE-2006-5321.
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5515 | 4.3 |
Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery s
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5508 | 7.5 |
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.
|
17-10-2018 - 21:43 | 25-10-2006 - 22:07 | |
| CVE-2006-5512 | 4.3 |
Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
|
17-10-2018 - 21:43 | 25-10-2006 - 22:07 | |
| CVE-2006-5509 | 7.5 |
Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL in
|
17-10-2018 - 21:43 | 25-10-2006 - 22:07 | |
| CVE-2006-5503 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
|
17-10-2018 - 21:43 | 25-10-2006 - 22:07 | |
| CVE-2006-5499 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.
|
17-10-2018 - 21:43 | 25-10-2006 - 10:07 | |
| CVE-2007-0427 | 9.3 |
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.
|
16-10-2018 - 16:32 | 23-01-2007 - 00:28 | |
| CVE-2007-5112 | 4.3 |
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOT
|
15-10-2018 - 21:40 | 26-09-2007 - 23:17 | |
| CVE-2008-3761 | 4.9 |
hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for I
|
29-09-2017 - 01:31 | 21-08-2008 - 17:41 | |
| CVE-2005-3775 | 7.5 |
PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter.
|
18-10-2016 - 03:37 | 23-11-2005 - 01:03 | |
| CVE-2011-1564 | 10.0 |
Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which t
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 |