| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-6082 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.
|
14-02-2024 - 01:17 | 24-11-2006 - 18:07 | |
| CVE-2006-6074 | 7.5 |
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE:
|
14-02-2024 - 01:17 | 24-11-2006 - 17:07 | |
| CVE-2006-3376 | 7.5 |
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field i
|
18-10-2018 - 16:47 | 06-07-2006 - 20:05 | |
| CVE-2006-6045 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the path[skin] parameter to (1) adminfoot.php, (2) adminhead.php, or (3) adminlogin.php.
|
17-10-2018 - 21:46 | 22-11-2006 - 00:07 | |
| CVE-2006-6040 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a
|
17-10-2018 - 21:46 | 22-11-2006 - 00:07 | |
| CVE-2006-6081 | 7.5 |
PHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter.
|
17-10-2018 - 21:46 | 24-11-2006 - 17:07 | |
| CVE-2006-6079 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP code via a URL in the mainframe parameter to (1) admin.loudmouth.php or (2) toolbar.loudmouth.php.
|
17-10-2018 - 21:46 | 24-11-2006 - 17:07 | |
| CVE-2006-6034 | 7.5 |
Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL commands via the (1) keyword or (2) cid parameter in (a) catalogue.asp, or the (3) pid parameter in (b) viewDetail.a
|
17-10-2018 - 21:46 | 21-11-2006 - 23:07 | |
| CVE-2006-6080 | 7.5 |
Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (1) catID or (2) editorID parameter.
|
17-10-2018 - 21:46 | 24-11-2006 - 17:07 | |
| CVE-2006-6078 | 7.5 |
PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the cm_basedir parameter.
|
17-10-2018 - 21:46 | 24-11-2006 - 17:07 | |
| CVE-2007-0542 | 6.8 |
Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter.
|
16-10-2018 - 16:33 | 29-01-2007 - 17:28 | |
| CVE-2007-5218 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
|
15-10-2018 - 21:41 | 05-10-2007 - 00:17 | |
| CVE-2011-1660 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via (1) the reportName or (2) unique
|
09-10-2018 - 19:31 | 10-04-2011 - 02:51 | |
| CVE-2008-3794 | 6.8 |
Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and
|
29-09-2017 - 01:31 | 26-08-2008 - 15:41 | |
| CVE-2005-3801 | 4.6 |
CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) function, which reduces the search time in brute forc
|
18-10-2016 - 03:37 | 24-11-2005 - 11:03 |