| Max CVSS | 9.3 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2698 | 7.8 |
Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php. This vulnerability is addressed in the followi
|
18-10-2018 - 16:41 | 31-05-2006 - 10:06 | |
| CVE-2006-2699 | 6.8 |
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action. This vulnerability is addressed in the following product
|
18-10-2018 - 16:41 | 31-05-2006 - 10:06 | |
| CVE-2006-2700 | 5.1 |
SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter. Successful exploitation requires that "magic_quotes_gpc
|
18-10-2018 - 16:41 | 31-05-2006 - 10:06 | |
| CVE-2006-6374 | 7.5 |
Multiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a phpMyAdmin cookie in (1) css/phpmyadmin.css.php, (2) db_create
|
17-10-2018 - 21:47 | 07-12-2006 - 17:28 | |
| CVE-2006-6373 | 5.0 |
PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request for libraries/common.lib.php, which reveals the path in an error message.
|
17-10-2018 - 21:47 | 07-12-2006 - 17:28 | |
| CVE-2007-4326 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) gruppen.php, (2) bild.php, (3) feed.php, (4) mitglieder.php, (5) onli
|
15-10-2018 - 21:34 | 14-08-2007 - 00:17 | |
| CVE-2008-3167 | 9.3 |
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in
|
29-09-2017 - 01:31 | 14-07-2008 - 23:41 |