| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0413 | 7.5 | Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter. | 2018-10-19 15:44:00 | 2006-01-25 11:03:00 |
| CVE-2006-0409 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup. | 2018-10-19 15:44:00 | 2006-01-25 02:03:00 |
| CVE-2006-0407 | 4.3 | Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the | 2018-10-19 15:44:00 | 2006-01-25 02:03:00 |
| CVE-2006-0406 | 5.0 | search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters. | 2018-10-19 15:44:00 | 2006-01-25 02:03:00 |
| CVE-2006-0403 | 7.5 | Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving | 2018-10-19 15:44:00 | 2006-01-25 02:03:00 |
| CVE-2006-0321 | 5.0 | fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster. | 2018-10-19 15:44:00 | 2006-01-24 00:03:00 |
| CVE-2006-0376 | 7.5 | The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad | 2018-10-19 15:44:00 | 2006-01-22 20:03:00 |
| CVE-2006-0372 | 7.5 | Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a cookie. | 2018-10-19 15:44:00 | 2006-01-22 20:03:00 |
| CVE-2006-0371 | 5.0 | Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post paramete | 2018-10-19 15:44:00 | 2006-01-22 20:03:00 |
| CVE-2006-0370 | 5.0 | Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes. | 2018-10-19 15:44:00 | 2006-01-22 20:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: