| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4286 | 7.5 |
PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this i
|
07-08-2024 - 19:15 | 22-08-2006 - 17:04 | |
| CVE-2008-4119 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "multiple web forms."
|
09-04-2021 - 18:54 | 27-09-2008 - 10:30 | |
| CVE-2006-0716 | 7.5 |
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
|
19-10-2018 - 15:45 | 15-02-2006 - 11:06 | |
| CVE-2007-1440 | 7.5 |
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter.
|
16-10-2018 - 16:38 | 13-03-2007 - 23:19 | |
| CVE-2007-6307 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
|
15-10-2018 - 21:51 | 11-12-2007 - 21:46 | |
| CVE-2008-4296 | 10.0 |
The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.
|
11-10-2018 - 20:51 | 27-09-2008 - 10:30 | |
| CVE-2008-4241 | 7.5 |
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie.
|
29-09-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2008-4243 | 7.8 |
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
|
29-09-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2008-4600 | 7.5 |
configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4245 | 6.5 |
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to (1) change a user's privileges, (2) delete a user account, or perform unspecified other administrative actions via
|
29-09-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2008-4177 | 7.5 |
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.
|
29-09-2017 - 01:32 | 23-09-2008 - 15:25 | |
| CVE-2008-4244 | 7.5 |
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1.
|
29-09-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2008-4187 | 4.3 |
Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.
|
29-09-2017 - 01:32 | 23-09-2008 - 17:01 | |
| CVE-2008-4185 | 7.5 |
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213.
|
29-09-2017 - 01:32 | 23-09-2008 - 15:25 | |
| CVE-2010-4875 | 4.3 |
Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.
|
29-08-2017 - 01:29 | 07-10-2011 - 10:55 | |
| CVE-2008-4242 | 6.8 |
ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing ses
|
08-08-2017 - 01:32 | 25-09-2008 - 19:25 | |
| CVE-2008-4247 | 7.5 |
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execu
|
23-10-2012 - 02:53 | 25-09-2008 - 19:25 |