| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1547 | 4.3 |
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in th
|
09-04-2020 - 13:22 | 21-10-2008 - 01:18 | |
| CVE-2008-4619 | 10.0 |
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in program 100000 (rpcbind), related to the XDR_DECODE operation and the taddr2uaddr function. NOTE: this mig
|
30-10-2018 - 16:25 | 21-10-2008 - 00:10 | |
| CVE-2006-0708 | 9.3 |
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an
|
19-10-2018 - 15:45 | 15-02-2006 - 11:06 | |
| CVE-2006-4310 | 4.3 |
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
|
17-10-2018 - 21:34 | 23-08-2006 - 19:04 | |
| CVE-2007-6367 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username (user) or (2) comment (commento) field, different vectors than CVE-20
|
15-10-2018 - 21:52 | 15-12-2007 - 01:46 | |
| CVE-2007-6366 | 7.5 |
Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to mods.php; the id parameter to
|
15-10-2018 - 21:52 | 15-12-2007 - 01:46 | |
| CVE-2007-4350 | 4.3 |
Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.
|
15-10-2018 - 21:34 | 21-10-2008 - 18:00 | |
| CVE-2008-4121 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofri
|
11-10-2018 - 20:50 | 21-10-2008 - 18:00 | |
| CVE-2008-4628 | 7.5 |
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4632 | 6.8 |
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the (1) post and (2) doc parameters.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4625 | 7.5 |
SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4642 | 7.5 |
SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.
|
29-09-2017 - 01:32 | 21-10-2008 - 18:42 | |
| CVE-2008-4627 | 7.5 |
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4626 | 6.8 |
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 and possibly other versions through 2.3.3-beta0, when magic_quotes_gpc is disabled, allows remote attackers to include and e
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2010-4909 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or the (2) image parameter to image.php.
|
14-02-2012 - 04:02 | 08-10-2011 - 10:55 | |
| CVE-2007-1498 | 9.3 |
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote at
|
08-03-2011 - 02:52 | 16-03-2007 - 22:19 |