| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-2522 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start
|
29-08-2022 - 20:20 | 29-07-2011 - 20:55 | |
| CVE-2006-0100 | 4.6 |
Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in the "Name of site" field of an FTP account. NOTE: because this program executes with the privileges of the invoking user, and beca
|
19-10-2018 - 15:42 | 06-01-2006 - 11:03 | |
| CVE-2006-3956 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) AccountUsername and (3) Message parameters.
|
17-10-2018 - 21:32 | 01-08-2006 - 21:04 | |
| CVE-2007-5130 | 4.3 |
SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php or (2) a direct request to admin/trailer.php, which reveals the path in various error messages.
|
15-10-2018 - 21:40 | 27-09-2007 - 19:17 | |
| CVE-2007-5127 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web script or HTML via (1) the l_username parameter to the default URI under admin/ or (2) the l_emoticonlist parameter to admin/emoticon
|
15-10-2018 - 21:40 | 27-09-2007 - 19:17 | |
| CVE-2007-5106 | 4.3 |
Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the user_login parameter.
|
15-10-2018 - 21:40 | 26-09-2007 - 22:17 | |
| CVE-2007-5105 | 4.3 |
Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.
|
15-10-2018 - 21:40 | 26-09-2007 - 22:17 | |
| CVE-2007-5128 | 5.0 |
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for t
|
15-10-2018 - 21:40 | 27-09-2007 - 19:17 | |
| CVE-2007-5112 | 4.3 |
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, a different vulnerability than CVE-2007-4713. NOT
|
15-10-2018 - 21:40 | 26-09-2007 - 23:17 | |
| CVE-2007-5109 | 4.3 |
Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level param
|
15-10-2018 - 21:40 | 26-09-2007 - 23:17 | |
| CVE-2007-5141 | 6.8 |
SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter.
|
15-10-2018 - 21:40 | 28-09-2007 - 21:17 | |
| CVE-2007-5135 | 6.8 |
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue wa
|
15-10-2018 - 21:40 | 27-09-2007 - 20:17 | |
| CVE-2007-4872 | 5.0 |
SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an invalid lang parameter to admin/index.php; or a direct request to (2) admin/dbg_infos.php, (3) admin/heading.php, or (4) evsearch.php; which reveals the path in vario
|
15-10-2018 - 21:38 | 27-09-2007 - 19:17 | |
| CVE-2007-4873 | 5.0 |
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
|
15-10-2018 - 21:38 | 27-09-2007 - 19:17 | |
| CVE-2008-4243 | 7.8 |
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
|
29-09-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2007-5125 | 5.0 |
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1171. Reason: This candidate is a duplicate of CVE-2007-1171. Notes: All CVE users should reference CVE-2007-1171 instead of this candidate. All references and descriptions in t
|
11-09-2008 - 01:00 | 27-09-2007 - 19:17 | |
| CVE-2002-2352 | 5.8 |
The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.
|
05-09-2008 - 20:33 | 31-12-2002 - 05:00 |