| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1398 | 4.3 |
Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter.
|
18-10-2018 - 16:32 | 28-03-2006 - 11:06 | |
| CVE-2006-4985 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text
|
17-10-2018 - 21:40 | 26-09-2006 - 02:07 | |
| CVE-2006-4986 | 5.0 |
Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/in
|
17-10-2018 - 21:40 | 26-09-2006 - 02:07 | |
| CVE-2006-4984 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter in (1) adminpanel/includes/mailinglist/mlist_xls.php and (2) adminpanel/in
|
17-10-2018 - 21:40 | 26-09-2006 - 02:07 | |
| CVE-2007-2326 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter to (1) Smarty.class.php and (2) Smarty_Compiler.class.php in inc/libs/; (3) core.displa
|
16-10-2018 - 16:43 | 27-04-2007 - 00:19 | |
| CVE-2008-0691 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp
|
15-10-2018 - 22:02 | 12-02-2008 - 01:00 | |
| CVE-2008-5219 | 7.5 |
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account passwor
|
29-09-2017 - 01:32 | 25-11-2008 - 18:30 |