| Max CVSS | 10.0 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3988 | 5.1 |
PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the news_include_path parameter. Successful exploitation requires that "register_glo
|
17-10-2018 - 21:32 | 05-08-2006 - 00:04 | |
| CVE-2006-7070 | 7.5 |
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers to upload and execute arbitrary files via an nfile[] parameter with a filename that contains a .php extension
|
16-10-2018 - 16:29 | 02-03-2007 - 21:18 | |
| CVE-2007-5752 | 7.5 |
adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin (userlevel 4) privileges.
|
15-10-2018 - 21:46 | 31-10-2007 - 17:46 | |
| CVE-2007-5587 | 6.9 |
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory loc
|
15-10-2018 - 21:45 | 19-10-2007 - 21:17 | |
| CVE-2008-3827 | 9.3 |
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the strea
|
11-10-2018 - 20:49 | 29-09-2008 - 19:25 | |
| CVE-2003-1375 | 7.2 |
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument.
|
11-10-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2011-0065 | 10.0 |
Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel.
|
19-09-2017 - 01:31 | 07-05-2011 - 18:55 | |
| CVE-2007-5629 | 4.3 |
Cross-site scripting (XSS) vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2007-2804. NOTE: the provenance of thi
|
29-07-2017 - 01:33 | 23-10-2007 - 16:46 | |
| CVE-2002-2273 | 4.3 |
Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2002-2303 | 7.8 |
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2002-2269 | 9.4 |
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2003-1376 | 4.6 |
WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1414 | 4.3 |
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... (triple dot) in the filename parameter.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1453 | 4.3 |
Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 through 2.0.1 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in an IMG tag.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1452 | 3.6 |
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1413 | 4.3 |
parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1415 | 6.8 |
NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid chunked transfer encoding specification.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2006-0160 | 7.5 |
SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3.
|
20-07-2017 - 01:29 | 10-01-2006 - 11:03 |