| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2103 | 2.1 |
SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the (1) query string ($querystring variable) in (a) admin/adminlogs.php, which is not properly handled by adm
|
18-10-2018 - 16:38 | 29-04-2006 - 10:02 | |
| CVE-2006-5658 | 7.6 |
BlooMooWeb ActiveX control (AidemATL.dll) allows remote attackers to (1) download arbitrary files via a URL in the bstrUrl parameter to the BW_DownloadFile method, (2) execute arbitrary local files via a file path in the bstrParams parameter to the B
|
17-10-2018 - 21:44 | 03-11-2006 - 00:07 | |
| CVE-2007-3252 | 7.8 |
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786.
|
16-10-2018 - 16:48 | 18-06-2007 - 10:30 | |
| CVE-2008-1753 | 4.3 |
Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.
|
11-10-2018 - 20:36 | 11-04-2008 - 21:05 | |
| CVE-2011-0420 | 5.0 |
The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference. Per: htt
|
10-10-2018 - 20:09 | 19-02-2011 - 01:00 | |
| CVE-2010-3272 | 4.3 |
accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, v
|
10-10-2018 - 20:01 | 17-02-2011 - 18:00 | |
| CVE-2010-3274 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString pa
|
10-10-2018 - 20:01 | 17-02-2011 - 18:00 | |
| CVE-2010-3273 | 5.0 |
ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password
|
10-10-2018 - 20:01 | 17-02-2011 - 18:00 | |
| CVE-2008-5722 | 10.0 |
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf (preferences) file.
|
29-09-2017 - 01:32 | 26-12-2008 - 17:30 | |
| CVE-2010-4739 | 7.5 |
SQL injection vulnerability in the Maian Media Silver (com_maianmedia) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a music action to index.php.
|
04-07-2013 - 07:13 | 16-02-2011 - 03:00 | |
| CVE-2010-4740 | 9.3 |
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.
|
22-09-2011 - 03:27 | 16-02-2011 - 03:00 | |
| CVE-2010-4734 | 2.6 |
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters.
|
22-09-2011 - 03:27 | 16-02-2011 - 03:00 | |
| CVE-2010-4736 | 7.5 |
SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECO_ID parameter. NOTE: some of these details are obtained from third party information.
|
22-09-2011 - 03:27 | 16-02-2011 - 03:00 | |
| CVE-2010-4738 | 7.5 |
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.
|
22-09-2011 - 03:27 | 16-02-2011 - 03:00 | |
| CVE-2010-4737 | 7.5 |
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter.
|
22-09-2011 - 03:27 | 16-02-2011 - 03:00 |