| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4287 | 7.5 |
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php.
|
19-10-2018 - 15:40 | 16-12-2005 - 11:03 | |
| CVE-2006-3774 | 6.8 |
PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
|
17-10-2018 - 21:30 | 24-07-2006 - 12:19 | |
| CVE-2007-2328 | 7.5 |
PHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to execute arbitrary PHP code via a URL in the msetstr[PROGSDIR] parameter.
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2308 | 4.3 |
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the rok parameter.
|
16-10-2018 - 16:43 | 26-04-2007 - 21:19 | |
| CVE-2007-2329 | 7.5 |
PHP remote file inclusion vulnerability in searchbot.php in Searchactivity allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2327 | 7.5 |
PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settings[app_dir] parameter.
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2330 | 7.5 |
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2326 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter to (1) Smarty.class.php and (2) Smarty_Compiler.class.php in inc/libs/; (3) core.displa
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2331 | 7.5 |
PHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang_list parameter.
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2007-2205 | 7.5 |
PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-
|
16-10-2018 - 16:42 | 24-04-2007 - 20:19 | |
| CVE-2007-2290 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php. NOTE
|
16-10-2018 - 16:42 | 26-04-2007 - 19:19 | |
| CVE-2008-2437 | 10.0 |
Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP reque
|
11-10-2018 - 20:41 | 16-09-2008 - 22:00 | |
| CVE-2011-1512 | 9.3 |
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.
|
09-10-2018 - 19:31 | 31-05-2011 - 20:55 | |
| CVE-2007-2243 | 5.0 |
OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a s
|
29-07-2017 - 01:31 | 25-04-2007 - 16:19 | |
| CVE-2002-2303 | 7.8 |
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 |