| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2252 | 6.4 |
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
18-10-2018 - 16:38 | 09-05-2006 - 10:02 | |
| CVE-2006-5886 | 7.5 |
SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
|
17-10-2018 - 21:45 | 14-11-2006 - 22:07 | |
| CVE-2007-3496 | 4.3 |
Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11, aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP1
|
16-10-2018 - 16:50 | 29-06-2007 - 18:30 | |
| CVE-2008-2027 | 5.8 |
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when accessed via certain browsers such as Mozilla Firefox, allows remote attackers to redirect users to arbitrary web sites and conduct phi
|
11-10-2018 - 20:38 | 30-04-2008 - 14:10 | |
| CVE-2008-5781 | 7.5 |
SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter.
|
29-09-2017 - 01:32 | 30-12-2008 - 20:30 | |
| CVE-2010-4971 | 4.3 |
Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5012 | 7.5 |
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5011 | 7.5 |
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5010 | 4.3 |
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5007 | 4.3 |
Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5003 | 7.5 |
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details a
|
29-08-2017 - 01:29 | 01-11-2011 - 22:55 | |
| CVE-2010-5009 | 7.5 |
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5008 | 7.5 |
SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 | |
| CVE-2010-5000 | 7.5 |
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obta
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 | |
| CVE-2010-5006 | 7.5 |
SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter.
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 | |
| CVE-2010-4998 | 7.5 |
PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained fr
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 |