| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-4514 | 5.0 |
The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated
|
08-08-2024 - 00:15 | 23-12-2005 - 01:03 | |
| CVE-2007-4127 | 6.8 |
PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is dispute
|
07-08-2024 - 15:15 | 01-08-2007 - 16:17 | |
| CVE-2010-3333 | 9.3 |
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via
|
16-07-2024 - 17:38 | 10-11-2010 - 03:00 | |
| CVE-2006-3906 | 5.0 |
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the sess
|
02-07-2024 - 12:57 | 27-07-2006 - 22:04 | |
| CVE-2007-4094 | 7.5 |
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the login_form parameter, a different vector than CVE-2006-3776.
|
14-02-2024 - 01:17 | 30-07-2007 - 20:17 | |
| CVE-2007-1100 | 7.8 |
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
|
16-10-2018 - 16:36 | 26-02-2007 - 17:28 | |
| CVE-2007-4101 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.
|
15-10-2018 - 21:33 | 31-07-2007 - 10:17 | |
| CVE-2007-4093 | 7.8 |
Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing usernames and encrypted passwords via a direct request for db/users.db.
|
15-10-2018 - 21:33 | 30-07-2007 - 20:17 | |
| CVE-2007-4110 | 7.5 |
SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter.
|
15-10-2018 - 21:33 | 31-07-2007 - 10:17 | |
| CVE-2007-4095 | 7.5 |
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp.
|
15-10-2018 - 21:33 | 30-07-2007 - 20:17 | |
| CVE-2007-4047 | 6.4 |
geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listcomment.php in admin/, which allows remote attackers to delete arbitrary comments, delete arbitrary blogs, and have other unspecifie
|
15-10-2018 - 21:33 | 27-07-2007 - 22:30 | |
| CVE-2007-4118 | 7.5 |
PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.
|
15-10-2018 - 21:33 | 01-08-2007 - 16:17 | |
| CVE-2007-4022 | 4.3 |
Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter.
|
15-10-2018 - 21:32 | 26-07-2007 - 19:30 | |
| CVE-2007-3975 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412.
|
15-10-2018 - 21:32 | 25-07-2007 - 17:30 | |
| CVE-2008-4170 | 5.0 |
create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.
|
11-10-2018 - 20:51 | 22-09-2008 - 18:34 | |
| CVE-2003-1520 | 6.8 |
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
|
05-09-2008 - 20:37 | 31-12-2003 - 05:00 |