| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0703 | 4.3 | Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parame | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0693 | 7.5 | Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0692 | 7.5 | Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0691 | 5.0 | edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0690 | 7.5 | Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0689 | 4.3 | Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0688 | 7.5 | PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. | 2018-10-19 15:45:00 | 2006-02-15 11:06:00 |
| CVE-2006-0687 | 5.0 | process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable. | 2018-10-19 15:45:00 | 2006-02-15 00:02:00 |
| CVE-2006-0686 | 10.0 | add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access. | 2018-10-19 15:45:00 | 2006-02-15 00:02:00 |
| CVE-2006-0685 | 10.0 | The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access. | 2018-10-19 15:45:00 | 2006-02-15 00:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: