Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2006-5380 | 7.5 |
Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15,
|
07-08-2024 - 20:15 | 18-10-2006 - 04:06 | |
CVE-2006-1958 | 6.4 |
Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php.
|
18-10-2018 - 16:37 | 21-04-2006 - 10:02 | |
CVE-2007-0694 | 4.3 |
Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.
|
16-10-2018 - 16:33 | 30-05-2007 - 20:30 | |
CVE-2008-1323 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.
|
11-10-2018 - 20:31 | 13-03-2008 - 14:44 | |
CVE-2008-5577 | 7.5 |
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter.
|
29-09-2017 - 01:32 | 15-12-2008 - 18:00 | |
CVE-2008-5578 | 7.5 |
Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL commands via (1) the f parameter in a showforum action, (2) the u parameter in a profile action, (3) the viewcat
|
29-09-2017 - 01:32 | 15-12-2008 - 18:00 | |
CVE-2008-5576 | 7.5 |
admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via a large value of the current_user[users_level] parameter.
|
29-09-2017 - 01:32 | 15-12-2008 - 18:00 |