| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2504 | 7.5 |
Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search and (2) cate parameters to (a) list.asp, and the (3) id and cate parameters to (b) admin_ok.asp.
|
18-10-2018 - 16:40 | 22-05-2006 - 19:02 | |
| CVE-2006-6158 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email param
|
17-10-2018 - 21:46 | 28-11-2006 - 23:28 | |
| CVE-2007-4027 | 6.6 |
Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. NOTE: this program is not setuid by default, but there are some usage scenarios in which an administrator might make it setuid
|
15-10-2018 - 21:32 | 26-07-2007 - 19:30 | |
| CVE-2008-2574 | 7.5 |
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.
|
11-10-2018 - 20:41 | 06-06-2008 - 22:32 | |
| CVE-2008-5918 | 4.3 |
Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
|
29-09-2017 - 01:32 | 21-01-2009 - 02:30 | |
| CVE-2008-5920 | 7.5 |
The create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that is processed by the preg_replace function with the eval switch. Patch information - http://websvn.tigris.org/
|
29-09-2017 - 01:32 | 21-01-2009 - 02:30 | |
| CVE-2008-5919 | 6.8 |
Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwrite arbitrary files via directory traversal sequences in the rev parameter.
|
29-09-2017 - 01:32 | 21-01-2009 - 02:30 |