| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2066 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 p
|
18-10-2018 - 16:37 | 27-04-2006 - 13:34 | |
| CVE-2006-2067 | 7.5 |
SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter.
|
18-10-2018 - 16:37 | 27-04-2006 - 13:34 | |
| CVE-2006-5635 | 7.5 |
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.
|
17-10-2018 - 21:44 | 01-11-2006 - 00:07 | |
| CVE-2007-3151 | 5.0 |
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service (device reboot) via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters.
|
16-10-2018 - 16:47 | 11-06-2007 - 22:30 | |
| CVE-2008-5689 | 7.2 |
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference. Com
|
11-10-2018 - 20:56 | 19-12-2008 - 17:30 | |
| CVE-2008-1702 | 4.3 |
Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter. NOTE: some of these details are obtained from third party inf
|
11-10-2018 - 20:36 | 08-04-2008 - 18:05 |