| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-2097 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter to (1) click.php or (2) pollcollector.php in htdocs/; or (3) index.php,
|
11-04-2024 - 00:42 | 18-04-2007 - 10:19 | |
| CVE-2008-4071 | 5.0 |
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service (browser crash) via an src property value with an invalid acroie:// URL.
|
30-10-2018 - 16:25 | 15-09-2008 - 15:14 | |
| CVE-2006-3761 | 4.3 |
Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the
|
17-10-2018 - 21:29 | 21-07-2006 - 14:03 | |
| CVE-2007-2102 | 6.8 |
Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2098 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2105 | 7.5 |
Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the admin_skin parameter.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2061 | 4.3 |
Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
|
16-10-2018 - 16:41 | 18-04-2007 - 03:19 | |
| CVE-2007-2106 | 7.5 |
Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the current_theme parameter.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2099 | 6.8 |
Cross-site scripting (XSS) vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page[] parameter.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2100 | 10.0 |
FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2104 | 7.5 |
Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme_url parameter to (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) ar
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2007-2103 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php.
|
16-10-2018 - 16:41 | 18-04-2007 - 10:19 | |
| CVE-2006-7012 | 10.0 |
scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action.
|
16-10-2018 - 16:29 | 15-02-2007 - 02:28 | |
| CVE-2011-1838 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.
|
09-10-2018 - 19:32 | 20-05-2011 - 22:55 | |
| CVE-2003-1383 | 7.5 |
WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2005-1929 | 7.5 |
Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute
|
07-03-2011 - 05:00 | 14-12-2005 - 21:03 |