Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2008-5583 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action.
|
14-02-2024 - 01:17 | 15-12-2008 - 18:00 | |
CVE-2008-5584 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter t
|
14-02-2024 - 01:17 | 15-12-2008 - 18:00 | |
CVE-2007-2861 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) news.php, (2) preview.php, or (3) archive-display.ph
|
14-02-2024 - 01:17 | 24-05-2007 - 19:30 | |
CVE-2006-1639 | 5.1 |
SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Successful exploitation requires that "magic_quotes_gpc" is disabled. This vulnerability may affect all previo
|
18-10-2018 - 16:33 | 06-04-2006 - 10:04 | |
CVE-2006-5316 | 7.8 |
registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
CVE-2006-5314 | 7.5 |
PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
CVE-2006-5319 | 5.0 |
Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the foaf parameter.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
CVE-2006-5317 | 7.5 |
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
CVE-2006-5315 | 7.5 |
PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter.
|
17-10-2018 - 21:42 | 17-10-2006 - 17:07 | |
CVE-2008-1311 | 5.0 |
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or
|
11-10-2018 - 20:31 | 12-03-2008 - 17:44 |