| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1593 | 5.0 |
The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which caus
|
18-10-2018 - 16:33 | 03-04-2006 - 10:04 | |
| CVE-2006-5107 | 7.5 |
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc param
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2006-5109 | 5.0 |
Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.ph
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2006-5108 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the order_id parameter in (1) admin/print_order.php and (2) view_order.php; the (3) site_url and (4) la_
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2007-0609 | 5.1 |
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename w
|
16-10-2018 - 16:33 | 09-05-2007 - 17:19 | |
| CVE-2008-0810 | 7.5 |
SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
15-10-2018 - 22:03 | 19-02-2008 - 02:00 | |
| CVE-2008-5278 | 4.3 |
Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).
|
08-08-2017 - 01:33 | 28-11-2008 - 19:30 |