| Max CVSS | 7.2 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-3184 | 7.2 |
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) prod
|
19-10-2018 - 19:03 | 12-06-2007 - 21:30 | |
| CVE-2003-1556 | 4.3 |
Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.
|
19-10-2018 - 15:29 | 31-12-2003 - 05:00 | |
| CVE-2006-2059 | 5.0 |
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expressio
|
18-10-2018 - 16:37 | 26-04-2006 - 20:06 | |
| CVE-2006-2060 | 6.4 |
Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. (dot dot) in the
|
18-10-2018 - 16:37 | 26-04-2006 - 20:06 | |
| CVE-2006-2061 | 5.0 |
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters. The vendor h
|
18-10-2018 - 16:37 | 26-04-2006 - 20:06 | |
| CVE-2006-5607 | 5.0 |
Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified dot dot) sequences in the getpage parameter.
|
17-10-2018 - 21:43 | 30-10-2006 - 23:07 | |
| CVE-2008-5698 | 4.3 |
HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash) via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtai
|
29-09-2017 - 01:32 | 22-12-2008 - 15:30 |