| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4348 | 7.5 |
PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
|
17-10-2018 - 21:36 | 24-08-2006 - 21:04 | |
| CVE-2007-1503 | 7.5 |
Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the create_ctcp_message function using the message argument to the (1) me or (2) ctcp commands, an
|
16-10-2018 - 16:38 | 19-03-2007 - 22:19 | |
| CVE-2007-1502 | 6.8 |
Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a (1) long command, (2) long server argument to the (a) connect or (b) server commands, (3) long nick argument to the (c) nick command, or a long (4)
|
16-10-2018 - 16:38 | 19-03-2007 - 22:19 | |
| CVE-2007-6368 | 5.0 |
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the link parameter.
|
15-10-2018 - 21:52 | 15-12-2007 - 01:46 | |
| CVE-2007-4350 | 4.3 |
Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.
|
15-10-2018 - 21:34 | 21-10-2008 - 18:00 | |
| CVE-2008-4687 | 9.0 |
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.
|
13-05-2018 - 01:29 | 22-10-2008 - 18:00 | |
| CVE-2008-4703 | 7.5 |
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4719 | 9.3 |
PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter, a different vecto
|
29-09-2017 - 01:32 | 23-10-2008 - 20:00 | |
| CVE-2008-4738 | 7.5 |
SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 24-10-2008 - 10:30 | |
| CVE-2008-4700 | 6.8 |
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the libera_staff_pass cookie parameter.
|
29-09-2017 - 01:32 | 22-10-2008 - 22:00 | |
| CVE-2008-4705 | 7.5 |
SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4739 | 6.8 |
Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the navi parameter.
|
29-09-2017 - 01:32 | 24-10-2008 - 10:30 | |
| CVE-2008-4717 | 7.5 |
SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 20:00 | |
| CVE-2008-4704 | 10.0 |
PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-4699 | 9.3 |
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method.
|
29-09-2017 - 01:32 | 22-10-2008 - 22:00 | |
| CVE-2010-4911 | 7.5 |
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter.
|
29-08-2017 - 01:29 | 08-10-2011 - 10:55 | |
| CVE-2006-0661 | 4.3 |
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.
|
20-07-2017 - 01:29 | 13-02-2006 - 11:06 |