| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0655 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| CVE-2006-0654 | 7.5 | check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies. | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| CVE-2006-0653 | 7.5 | Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter. | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| CVE-2006-0650 | 4.3 | Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaint_response_type parameter, which is displayed in | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| CVE-2006-0648 | 5.0 | Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the (1) getdate and possibly other parameters used in the replace_files function in search.php and (2) $file varia | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| CVE-2006-0645 | 7.5 | Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by inva | 2018-10-19 15:45:00 | 2006-02-10 18:06:00 |
| CVE-2006-0644 | 7.5 | Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in ( | 2018-10-19 15:45:00 | 2006-02-10 11:02:00 |
| CVE-2006-0643 | 4.3 | Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users to inject arbitrary web script or HTML via the topic name of a conference. | 2018-10-19 15:45:00 | 2006-02-10 11:02:00 |
| CVE-2006-0642 | 5.1 | Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files," which may be too low | 2018-10-19 15:45:00 | 2006-02-10 11:02:00 |
| CVE-2006-0641 | 2.6 | Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmissi | 2018-10-19 15:45:00 | 2006-02-10 11:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: