Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2006-1463 | 5.1 |
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value.
|
18-10-2018 - 16:32 | 12-05-2006 - 20:06 | |
CVE-2006-6007 | 5.0 |
save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.
|
17-10-2018 - 21:46 | 21-11-2006 - 23:07 | |
CVE-2007-3792 | 4.3 |
Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter to (1) header.php, (2) footer.php, or (3) secure.admin.php in templates/.
|
15-10-2018 - 21:30 | 15-07-2007 - 23:30 | |
CVE-2008-2210 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_script, (2) msg_script2, and (3) msg_script3 parameters to admin/inc/footer.php; and the (4) msg_sc
|
11-10-2018 - 20:39 | 14-05-2008 - 17:20 | |
CVE-2009-0103 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.php, the (2) apps_path[themes] parameter to plugin/t
|
29-09-2017 - 01:33 | 09-01-2009 - 18:30 | |
CVE-2008-5881 | 7.5 |
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) gateway_module parameter to plugin/gateway/gnokii/init.php and the (2) them
|
29-09-2017 - 01:32 | 09-01-2009 - 18:30 |