| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2222 | 5.0 |
Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) characters.
|
18-10-2018 - 16:38 | 05-05-2006 - 19:02 | |
| CVE-2006-5898 | 5.0 |
Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.
|
17-10-2018 - 21:45 | 15-11-2006 - 15:07 | |
| CVE-2007-3500 | 10.0 |
Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.
|
16-10-2018 - 16:50 | 29-06-2007 - 18:30 | |
| CVE-2007-4517 | 6.0 |
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
|
15-10-2018 - 21:35 | 08-11-2007 - 20:46 | |
| CVE-2008-2075 | 4.3 |
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
|
11-10-2018 - 20:39 | 05-05-2008 - 16:20 | |
| CVE-2010-5038 | 7.5 |
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
|
10-10-2018 - 20:08 | 02-11-2011 - 21:55 | |
| CVE-2011-2763 | 7.5 |
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.
|
09-10-2018 - 19:33 | 02-09-2011 - 16:55 | |
| CVE-2008-5778 | 7.5 |
SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
|
29-09-2017 - 01:32 | 30-12-2008 - 20:30 | |
| CVE-2010-5035 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE: some of these details are obtained from third p
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5036 | 7.5 |
SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5034 | 7.5 |
SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-5033 | 7.5 |
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2011-3379 | 7.5 |
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages a
|
03-07-2012 - 04:02 | 03-11-2011 - 15:55 | |
| CVE-2011-2740 | 9.3 |
EMC RSA Key Manager (RKM) Appliance 2.7 SP1 before 2.7.1.6, when Firefox 4.x or 5.0 is used, does not properly terminate a user session upon a logout action, which makes it easier for remote attackers to execute arbitrary code by leveraging an unatte
|
17-02-2012 - 04:08 | 09-11-2011 - 23:55 | |
| CVE-2011-2739 | 8.5 |
The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploade
|
14-02-2012 - 04:07 | 09-11-2011 - 23:55 | |
| CVE-2010-5037 | 7.5 |
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
|
14-02-2012 - 04:02 | 02-11-2011 - 21:55 |