| Max CVSS | 8.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4664 | 5.1 |
PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
|
14-02-2024 - 01:17 | 09-09-2006 - 00:04 | |
| CVE-2007-1913 | 5.0 |
The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and groups on systems and domains via unspecified vectors, a different vulnerability than CVE-2006-6010
|
22-09-2021 - 14:22 | 10-04-2007 - 23:19 | |
| CVE-2008-0240 | 4.3 |
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."
|
15-10-2018 - 21:58 | 11-01-2008 - 22:46 | |
| CVE-2008-0239 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) result
|
15-10-2018 - 21:58 | 11-01-2008 - 22:46 | |
| CVE-2008-0241 | 5.8 |
Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter
|
15-10-2018 - 21:58 | 11-01-2008 - 22:46 | |
| CVE-2008-4877 | 6.8 |
SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information.
|
29-09-2017 - 01:32 | 01-11-2008 - 06:00 | |
| CVE-2008-4878 | 8.5 |
Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to t
|
29-09-2017 - 01:32 | 01-11-2008 - 06:00 | |
| CVE-2006-1091 | 7.8 |
Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors.
|
20-07-2017 - 01:30 | 09-03-2006 - 13:06 |