| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0719 | 7.5 |
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter.
|
19-10-2018 - 15:45 | 15-02-2006 - 22:06 | |
| CVE-2006-4221 | 9.3 |
Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
|
17-10-2018 - 21:34 | 18-08-2006 - 20:04 | |
| CVE-2007-1443 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the (1) r_username, (2) r_email, (3) r_passwor
|
16-10-2018 - 16:38 | 14-03-2007 - 00:19 | |
| CVE-2008-4072 | 7.5 |
Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter in a pickup action or (2) the sql_cid parameter, different vectors than CVE-2008-3588.
|
11-10-2018 - 20:50 | 15-09-2008 - 15:14 | |
| CVE-2008-3824 | 4.3 |
Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before 3.2.2 and (2) externalinput.php in Popoon r22196 and earlier allows remote attackers to inject arbitrary web script or HTML by usi
|
11-10-2018 - 20:49 | 12-09-2008 - 16:56 | |
| CVE-2008-3823 | 4.3 |
Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message.
|
11-10-2018 - 20:49 | 12-09-2008 - 16:56 | |
| CVE-2008-4584 | 6.8 |
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-4044 | 7.5 |
SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the artid parameter.
|
29-09-2017 - 01:31 | 11-09-2008 - 21:06 | |
| CVE-2008-4050 | 9.3 |
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the Ge
|
29-09-2017 - 01:31 | 11-09-2008 - 21:06 | |
| CVE-2008-4049 | 6.8 |
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method.
|
29-09-2017 - 01:31 | 11-09-2008 - 21:06 | |
| CVE-2008-4043 | 7.5 |
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to (1) acme/article/comment.php and (2) prime/article/comment.php.
|
29-09-2017 - 01:31 | 11-09-2008 - 21:06 | |
| CVE-2008-4074 | 7.5 |
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.
|
29-09-2017 - 01:31 | 15-09-2008 - 15:14 | |
| CVE-2008-4048 | 6.8 |
Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method.
|
29-09-2017 - 01:31 | 11-09-2008 - 21:06 | |
| CVE-2008-4073 | 7.5 |
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action.
|
29-09-2017 - 01:31 | 15-09-2008 - 15:14 | |
| CVE-2008-4075 | 6.8 |
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.
|
29-09-2017 - 01:31 | 15-09-2008 - 15:14 | |
| CVE-2011-1485 | 6.9 |
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
|
19-12-2012 - 04:39 | 31-05-2011 - 20:55 |