Max CVSS | 8.5 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2006-2328 | 6.4 |
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string.
|
18-10-2018 - 16:39 | 12-05-2006 - 00:02 | |
CVE-2006-2329 | 5.0 |
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for (1) adodb-access.inc.php, (2) adodb-ado.inc.php, (3) adodb-ado_access.inc, (4) adodb-ado_mssql.inc.php, (5) adodb-borland_ibase, (6) adodb-c
|
18-10-2018 - 16:39 | 12-05-2006 - 00:02 | |
CVE-2006-5977 | 7.5 |
Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the (1) M or (2) Y parameter to rss_out.asp, or the (3) cate parameter to all_calendars.asp. NOTE: the all_calendars.asp/calsids ve
|
17-10-2018 - 21:46 | 20-11-2006 - 21:07 | |
CVE-2008-2204 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) header, (2) header2, (3) header3, (4) header4, (5) header5, (6) header6, (7) hea
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
CVE-2008-2203 | 7.5 |
SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action.
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
CVE-2008-5873 | 7.5 |
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username.
|
29-09-2017 - 01:32 | 08-01-2009 - 18:30 | |
CVE-2007-3768 | 8.5 |
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) via a malformed response to a PASV command.
|
29-07-2017 - 01:32 | 15-07-2007 - 21:30 |