| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0729 | 7.5 |
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
|
19-10-2018 - 15:45 | 16-02-2006 - 11:02 | |
| CVE-2006-4498 | 7.5 |
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922.
|
17-10-2018 - 21:37 | 31-08-2006 - 22:04 | |
| CVE-2007-1638 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote attackers to perform unauthorized actions as an arbitrary user via the (
|
16-10-2018 - 16:39 | 23-03-2007 - 23:19 | |
| CVE-2007-6508 | 7.5 |
Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.
|
15-10-2018 - 21:54 | 21-12-2007 - 19:46 | |
| CVE-2011-4024 | 4.3 |
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
29-12-2017 - 02:29 | 21-10-2011 - 18:55 | |
| CVE-2008-5652 | 7.5 |
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these det
|
29-09-2017 - 01:32 | 17-12-2008 - 18:30 | |
| CVE-2008-5636 | 6.8 |
SQL injection vulnerability in cate.php in Lito Lite CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 17:30 | |
| CVE-2008-5637 | 7.5 |
SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands via the wr parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 17:30 | |
| CVE-2008-5649 | 10.0 |
SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 18:30 | |
| CVE-2008-5640 | 7.5 |
SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 17:30 | |
| CVE-2008-5650 | 7.5 |
SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 18:30 | |
| CVE-2008-4705 | 7.5 |
SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 23-10-2008 - 17:17 | |
| CVE-2008-5642 | 5.0 |
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a cms_language cookie.
|
29-09-2017 - 01:32 | 17-12-2008 - 17:30 | |
| CVE-2008-5639 | 4.3 |
Directory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via a .. (dot dot) in the m parameter.
|
29-09-2017 - 01:32 | 17-12-2008 - 17:30 | |
| CVE-2008-5643 | 7.5 |
SQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter in a book_details action to index.php.
|
29-09-2017 - 01:32 | 17-12-2008 - 18:30 | |
| CVE-2008-5645 | 7.8 |
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
|
08-08-2017 - 01:33 | 17-12-2008 - 18:30 |