| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-5761 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter.
|
14-02-2024 - 01:17 | 06-11-2006 - 23:07 | |
| CVE-2006-5759 | 5.0 |
index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty (1) rns[] or (2) pag[] arguments, which reveals the path in an error message.
|
14-02-2024 - 01:17 | 06-11-2006 - 22:07 | |
| CVE-2011-1582 | 4.3 |
Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOT
|
13-02-2023 - 01:19 | 20-05-2011 - 22:55 | |
| CVE-2006-2116 | 7.5 |
planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.
|
18-10-2018 - 16:38 | 01-05-2006 - 21:06 | |
| CVE-2007-3269 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in a GET request or (2) the Title field of a visitor comment, and (3) allow remote au
|
16-10-2018 - 16:48 | 19-06-2007 - 21:30 | |
| CVE-2008-3922 | 9.3 |
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.
|
11-10-2018 - 20:50 | 04-09-2008 - 18:41 | |
| CVE-2010-0217 | 5.8 |
Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack.
|
10-10-2018 - 19:51 | 20-05-2011 - 22:55 | |
| CVE-2011-1899 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
|
09-10-2018 - 19:32 | 16-05-2011 - 17:55 | |
| CVE-2011-1838 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.
|
09-10-2018 - 19:32 | 20-05-2011 - 22:55 | |
| CVE-2011-1424 | 3.5 |
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated use
|
09-10-2018 - 19:30 | 24-05-2011 - 23:55 | |
| CVE-2008-5761 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default URI; (2) the foto parameter to photo.php in the 05_Fo
|
29-09-2017 - 01:32 | 30-12-2008 - 20:30 | |
| CVE-2011-1511 | 6.4 |
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to Administration.
|
21-12-2011 - 03:58 | 20-07-2011 - 22:55 | |
| CVE-2011-1567 | 10.0 |
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via craf
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1840 | 2.1 |
The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other account information in cleartext, which allows local users to obtain sensitive information by leveraging shell acce
|
22-09-2011 - 03:30 | 13-05-2011 - 17:05 | |
| CVE-2011-0614 | 9.3 |
Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Audition Session (aka .ses) file.
|
22-09-2011 - 03:28 | 16-05-2011 - 17:55 |