| Max CVSS | 7.8 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1898 | 2.6 |
Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the "A
|
18-10-2018 - 16:37 | 20-04-2006 - 10:02 | |
| CVE-2006-5512 | 4.3 |
Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
|
17-10-2018 - 21:43 | 25-10-2006 - 22:07 | |
| CVE-2007-3066 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) view.inc.php, (2) users.inc.php, (3) updatecms.inc.php, and (4)
|
16-10-2018 - 16:47 | 06-06-2007 - 01:30 | |
| CVE-2008-1494 | 7.5 |
SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.
|
11-10-2018 - 20:35 | 25-03-2008 - 19:44 | |
| CVE-2008-5645 | 7.8 |
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
|
08-08-2017 - 01:33 | 17-12-2008 - 18:30 |