| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0731 | 4.0 | WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame. | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| CVE-2006-0729 | 7.5 | SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters. | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| CVE-2006-0722 | 2.6 | settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, ( | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| CVE-2006-0721 | 7.5 | SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter. | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| CVE-2006-0719 | 7.5 | SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter. | 2018-10-19 15:45:00 | 2006-02-15 22:06:00 |
| CVE-2006-0716 | 7.5 | SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0715 | 4.3 | Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0714 | 5.0 | Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0713 | 5.0 | Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_ins | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0708 | 9.3 | Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: