| Max CVSS | 7.5 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4595 | 5.0 |
muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes.
|
10-02-2020 - 21:10 | 07-09-2006 - 00:04 | |
| CVE-2006-1045 | 2.6 |
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive info
|
18-10-2018 - 16:30 | 07-03-2006 - 11:02 | |
| CVE-2007-1845 | 7.5 |
SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the m_month parameter.
|
16-10-2018 - 16:40 | 03-04-2007 - 16:19 | |
| CVE-2007-6661 | 6.4 |
2z project 0.9.6.1 allows attackers to change the password without supplying the old password.
|
15-10-2018 - 21:56 | 04-01-2008 - 11:46 | |
| CVE-2007-6660 | 5.0 |
2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid template or (2) a request to the default URI with certain year and month parameters, which reveals the path in various error mes
|
15-10-2018 - 21:55 | 04-01-2008 - 11:46 | |
| CVE-2007-6659 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) contentshort or (2) contentfull parameter in an addnews action to the default URI; (3) the content par
|
15-10-2018 - 21:55 | 04-01-2008 - 11:46 | |
| CVE-2008-4763 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHP_SELF variable.
|
11-10-2018 - 20:52 | 28-10-2008 - 02:03 | |
| CVE-2010-5025 | 4.3 |
Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter. NOTE: some of these details are obtained from third party informat
|
10-10-2018 - 20:08 | 02-11-2011 - 21:55 |