| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2278 | 5.0 |
SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow parameter to (a) show.php or (b) index.php; the (2) Lsnrow parameter to (c) showcat.php; or the (3) rows parameter to
|
18-10-2018 - 16:38 | 10-05-2006 - 02:14 | |
| CVE-2006-2279 | 7.5 |
Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php.
|
18-10-2018 - 16:38 | 10-05-2006 - 02:14 | |
| CVE-2006-5918 | 7.5 |
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upload and execute arbitrary PHP scripts via the "Link to Download" field. NOTE: it is possible that the field v
|
17-10-2018 - 21:45 | 15-11-2006 - 15:07 | |
| CVE-2007-3575 | 7.5 |
SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php.
|
15-10-2018 - 21:29 | 05-07-2007 - 20:30 | |
| CVE-2008-5828 | 5.0 |
Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2)
|
11-10-2018 - 20:56 | 02-01-2009 - 19:30 | |
| CVE-2008-2131 | 4.3 |
Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."
|
11-10-2018 - 20:39 | 09-05-2008 - 18:20 |