| Max CVSS | 7.6 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2330 | 6.4 |
PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension
|
18-10-2018 - 16:39 | 12-05-2006 - 00:02 | |
| CVE-2006-2331 | 6.4 |
Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.
|
18-10-2018 - 16:39 | 12-05-2006 - 00:02 | |
| CVE-2006-5933 | 7.5 |
SQL injection vulnerability in update.asp in UltraSite 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
17-10-2018 - 21:46 | 16-11-2006 - 00:07 | |
| CVE-2007-3607 | 5.0 |
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (process crash) via unspecified vectors.
|
15-10-2018 - 21:29 | 06-07-2007 - 19:30 | |
| CVE-2007-3608 | 5.0 |
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors.
|
15-10-2018 - 21:29 | 06-07-2007 - 19:30 | |
| CVE-2007-3605 | 7.6 |
Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.
|
15-10-2018 - 21:29 | 06-07-2007 - 19:30 | |
| CVE-2008-2188 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) bookCopyright and (2) ver parameters to (a) footer.php, and the (3) bookName, (4) bookMetaTags, and (5)
|
11-10-2018 - 20:39 | 13-05-2008 - 22:20 | |
| CVE-2008-5855 | 5.0 |
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt.
|
29-09-2017 - 01:32 | 06-01-2009 - 17:30 | |
| CVE-2008-5854 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) ls_user and (2) ls_email parameters (aka the User form) in an ls_register act
|
29-09-2017 - 01:32 | 06-01-2009 - 17:30 |