| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-6205 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the (1) city or (2) State parameter.
|
14-02-2024 - 01:17 | 01-12-2006 - 01:28 | |
| CVE-2006-6208 | 7.5 |
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, an
|
14-02-2024 - 01:17 | 01-12-2006 - 01:28 | |
| CVE-2006-6204 | 7.5 |
Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to (a) dircat.asp; the (2) sid parameter to (b) dirSub.asp; the (3) TYPE_ID parameter to (c) types.asp; th
|
14-02-2024 - 01:17 | 01-12-2006 - 01:28 | |
| CVE-2006-3388 | 5.8 |
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter. Upgrade to 2.8.2
|
18-10-2018 - 16:47 | 06-07-2006 - 20:05 | |
| CVE-2006-2331 | 6.4 |
Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.
|
18-10-2018 - 16:39 | 12-05-2006 - 00:02 | |
| CVE-2006-6231 | 5.0 |
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message.
|
17-10-2018 - 21:47 | 02-12-2006 - 02:28 | |
| CVE-2006-6211 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to (a) admin/admincore.php, the (2) month parameter to (b) admin/comments.php or (c) admin/e
|
17-10-2018 - 21:47 | 01-12-2006 - 01:28 | |
| CVE-2006-6209 | 7.5 |
Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2) maingroup or (3) secondgroup p
|
17-10-2018 - 21:47 | 01-12-2006 - 01:28 | |
| CVE-2006-6196 | 6.8 |
Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field (txtsearchtext parameter).
|
17-10-2018 - 21:47 | 01-12-2006 - 00:28 | |
| CVE-2006-6186 | 5.0 |
Multiple directory traversal vulnerabilities in enomphp 4.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter to (1) config.php, (2) ranklv_inside.php, (3) rankml_inside.php, and (4) admin/Restore/config.php.
|
17-10-2018 - 21:47 | 01-12-2006 - 00:28 | |
| CVE-2006-6232 | 7.5 |
PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
|
17-10-2018 - 21:47 | 02-12-2006 - 02:28 | |
| CVE-2006-6230 | 7.5 |
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962.
|
17-10-2018 - 21:47 | 02-12-2006 - 02:28 | |
| CVE-2006-6210 | 7.5 |
SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
|
17-10-2018 - 21:47 | 01-12-2006 - 01:28 | |
| CVE-2006-6197 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (
|
17-10-2018 - 21:47 | 01-12-2006 - 01:28 | |
| CVE-2007-5253 | 5.0 |
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte (%00) sequence followed by an image file extension, as demonstrated by a req
|
15-10-2018 - 21:41 | 06-10-2007 - 17:17 | |
| CVE-2011-0994 | 10.0 |
Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.
|
09-10-2018 - 19:30 | 10-04-2011 - 02:55 | |
| CVE-2006-6957 | 6.8 |
PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[where_framework] parameter. NOTE: this
|
31-08-2013 - 05:20 | 29-01-2007 - 16:28 |