| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-5957 | 7.5 |
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) browse_group.asp, (2) productid parameter in (b) added_to_cart.asp, and (3) catid and (4) subid paramet
|
07-08-2024 - 20:15 | 17-11-2006 - 01:07 | |
| CVE-2006-2287 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile.
|
18-10-2018 - 16:39 | 10-05-2006 - 02:14 | |
| CVE-2006-5958 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in
|
17-10-2018 - 21:46 | 17-11-2006 - 01:07 | |
| CVE-2007-3697 | 7.5 |
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.
|
15-10-2018 - 21:29 | 11-07-2007 - 22:30 | |
| CVE-2008-2201 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) hea
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
| CVE-2008-5878 | 5.1 |
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot
|
29-09-2017 - 01:32 | 08-01-2009 - 19:30 | |
| CVE-2008-5879 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors.
|
29-09-2017 - 01:32 | 08-01-2009 - 19:30 | |
| CVE-2008-5877 | 6.8 |
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id paramet
|
29-09-2017 - 01:32 | 08-01-2009 - 19:30 |