| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-3378 | 6.8 |
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execu
|
18-09-2020 - 19:15 | 29-06-2007 - 18:30 | |
| CVE-2008-2392 | 9.0 |
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.
|
31-10-2018 - 18:37 | 21-05-2008 - 13:24 | |
| CVE-2006-0493 | 4.3 |
Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture.
|
19-10-2018 - 15:45 | 01-02-2006 - 02:02 | |
| CVE-2006-4140 | 5.0 |
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and ".
|
17-10-2018 - 21:33 | 14-08-2006 - 23:04 | |
| CVE-2006-7145 | 5.5 |
edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter.
|
16-10-2018 - 16:29 | 07-03-2007 - 20:19 | |
| CVE-2006-7144 | 7.5 |
SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page.
|
16-10-2018 - 16:29 | 07-03-2007 - 20:19 | |
| CVE-2006-7143 | 5.8 |
Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field.
|
16-10-2018 - 16:29 | 07-03-2007 - 20:19 | |
| CVE-2008-2391 | 7.8 |
SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page number) of -1.
|
11-10-2018 - 20:41 | 21-05-2008 - 13:24 | |
| CVE-2008-2398 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.
|
11-10-2018 - 20:41 | 21-05-2008 - 13:24 | |
| CVE-2008-2339 | 7.5 |
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-
|
11-10-2018 - 20:40 | 19-05-2008 - 13:20 | |
| CVE-2008-2301 | 7.5 |
SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) top_view.php.
|
11-10-2018 - 20:40 | 18-05-2008 - 14:20 | |
| CVE-2008-2212 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4, and unspecified other p
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
| CVE-2008-2213 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters.
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
| CVE-2008-2211 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script2 and (2) msg_script3 parameters.
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
| CVE-2008-2165 | 4.3 |
Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
|
11-10-2018 - 20:39 | 16-05-2008 - 12:54 | |
| CVE-2008-1104 | 9.3 |
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file, related to the util.printf JavaScript function and floating point specifiers in format strings.
|
11-10-2018 - 20:29 | 21-05-2008 - 13:24 | |
| CVE-2011-2577 | 7.8 |
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP
|
09-10-2018 - 19:32 | 31-08-2011 - 23:55 | |
| CVE-2008-4523 | 7.5 |
SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the user_name parameter.
|
29-09-2017 - 01:32 | 09-10-2008 - 18:14 |