| Max CVSS | 9.3 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1308 | 7.5 |
SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action to modules.php.
|
01-07-2019 - 16:48 | 12-03-2008 - 17:44 | |
| CVE-2006-1888 | 6.8 |
phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain administrator privileges via a direct request to index.php with the editwelcome parameter set to 1, which can then be used to modify the main page to inject arbitr
|
18-10-2018 - 16:37 | 20-04-2006 - 10:02 | |
| CVE-2006-5310 | 6.8 |
PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary P
|
17-10-2018 - 21:42 | 17-10-2006 - 16:07 | |
| CVE-2007-2852 | 9.3 |
Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.
|
16-10-2018 - 16:45 | 24-05-2007 - 19:30 | |
| CVE-2008-5581 | 7.5 |
PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.
|
11-10-2018 - 20:56 | 15-12-2008 - 18:00 | |
| CVE-2008-5580 | 7.5 |
mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument.
|
11-10-2018 - 20:56 | 15-12-2008 - 18:00 | |
| CVE-2008-5579 | 5.0 |
Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.
|
11-10-2018 - 20:56 | 15-12-2008 - 18:00 |