| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0576 | 7.2 | Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not ru | 2018-10-19 15:45:00 | 2006-02-08 00:06:00 |
| CVE-2006-0574 | 4.3 | Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary web script or HTML via the (1) file extension or (2) mime-type. | 2018-10-19 15:45:00 | 2006-02-07 18:06:00 |
| CVE-2006-0572 | 7.5 | phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication. | 2018-10-19 15:45:00 | 2006-02-07 18:06:00 |
| CVE-2006-0571 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface. | 2018-10-19 15:45:00 | 2006-02-07 18:06:00 |
| CVE-2006-0570 | 7.5 | Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the username parameter in check.php and (2) unknown attack vectors | 2018-10-19 15:45:00 | 2006-02-07 18:06:00 |
| CVE-2006-0568 | 4.3 | Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the file parameter. | 2018-10-19 15:45:00 | 2006-02-07 18:06:00 |
| CVE-2006-0566 | 5.0 | The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of elements. | 2018-10-19 15:45:00 | 2006-02-06 23:02:00 |
| CVE-2006-0565 | 7.5 | PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter. | 2018-10-19 15:45:00 | 2006-02-06 23:02:00 |
| CVE-2006-0563 | 7.5 | SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action. | 2018-10-19 15:45:00 | 2006-02-06 23:02:00 |
| CVE-2006-0562 | 4.3 | Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter. | 2018-10-19 15:45:00 | 2006-02-06 23:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: