| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0917 | 2.1 |
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from
|
18-10-2018 - 16:29 | 28-02-2006 - 11:02 | |
| CVE-2006-4421 | 4.3 |
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter.
|
17-10-2018 - 21:36 | 29-08-2006 - 00:04 | |
| CVE-2007-1506 | 4.3 |
Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.
|
16-10-2018 - 16:38 | 19-03-2007 - 22:19 | |
| CVE-2007-6459 | 6.8 |
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a
|
15-10-2018 - 21:54 | 20-12-2007 - 00:46 | |
| CVE-2008-5225 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3)
|
11-10-2018 - 20:54 | 25-11-2008 - 19:30 | |
| CVE-2008-5222 | 7.5 |
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
11-10-2018 - 20:54 | 25-11-2008 - 19:30 | |
| CVE-2008-4662 | 6.8 |
Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.
|
11-10-2018 - 20:52 | 22-10-2008 - 02:10 | |
| CVE-2010-4941 | 7.5 |
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php.
|
10-10-2018 - 20:08 | 09-10-2011 - 10:55 | |
| CVE-2008-5216 | 7.5 |
SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
29-09-2017 - 01:32 | 24-11-2008 - 17:30 | |
| CVE-2008-5221 | 7.5 |
The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified passw
|
29-09-2017 - 01:32 | 25-11-2008 - 18:30 | |
| CVE-2008-5196 | 7.5 |
SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter.
|
29-09-2017 - 01:32 | 21-11-2008 - 17:30 | |
| CVE-2008-5213 | 7.5 |
SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action.
|
29-09-2017 - 01:32 | 24-11-2008 - 17:30 | |
| CVE-2008-5219 | 7.5 |
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account passwor
|
29-09-2017 - 01:32 | 25-11-2008 - 18:30 | |
| CVE-2008-5218 | 5.0 |
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain cleartext passwords.
|
29-09-2017 - 01:32 | 25-11-2008 - 18:30 | |
| CVE-2008-5223 | 7.5 |
SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
|
29-09-2017 - 01:32 | 25-11-2008 - 19:30 | |
| CVE-2008-5226 | 7.5 |
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5
|
29-09-2017 - 01:32 | 25-11-2008 - 19:30 |