| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0806 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspeci
|
18-10-2018 - 16:29 | 21-02-2006 - 02:02 | |
| CVE-2006-4362 | 4.3 |
Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary web script or HTML via the ps parameter.
|
17-10-2018 - 21:36 | 27-08-2006 - 02:04 | |
| CVE-2007-1513 | 6.8 |
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter.
|
16-10-2018 - 16:38 | 20-03-2007 - 10:19 | |
| CVE-2008-4778 | 7.5 |
SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.
|
11-10-2018 - 20:52 | 29-10-2008 - 14:22 | |
| CVE-2008-4622 | 7.5 |
The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4781 | 7.5 |
Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter.
|
29-09-2017 - 01:32 | 29-10-2008 - 14:22 | |
| CVE-2008-4783 | 7.5 |
tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login cookie to "admin."
|
29-09-2017 - 01:32 | 29-10-2008 - 14:22 | |
| CVE-2008-4780 | 6.8 |
Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter.
|
29-09-2017 - 01:32 | 29-10-2008 - 14:22 | |
| CVE-2008-4779 | 10.0 |
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.
|
29-09-2017 - 01:32 | 29-10-2008 - 14:22 | |
| CVE-2008-4772 | 7.5 |
SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 19:46 | |
| CVE-2008-4758 | 5.0 |
Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. (dot dot) in the fichier parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 02:00 | |
| CVE-2008-4784 | 7.5 |
aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php.
|
29-09-2017 - 01:32 | 29-10-2008 - 14:22 | |
| CVE-2008-4759 | 5.0 |
Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. (dot dot) in the id parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 02:00 | |
| CVE-2008-4773 | 5.0 |
Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 19:46 | |
| CVE-2008-4755 | 7.5 |
SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 02:00 | |
| CVE-2008-4774 | 4.3 |
Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.
|
29-09-2017 - 01:32 | 28-10-2008 - 19:46 | |
| CVE-2010-4921 | 7.5 |
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.
|
29-08-2017 - 01:29 | 08-10-2011 - 10:55 |