| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0333 | 4.3 | Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php. | 2018-10-19 15:44:00 | 2006-01-21 00:03:00 |
| CVE-2006-0331 | 4.6 | Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments. | 2018-10-19 15:44:00 | 2006-01-21 00:03:00 |
| CVE-2006-0328 | 5.0 | Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request. | 2018-10-19 15:44:00 | 2006-01-21 00:03:00 |
| CVE-2006-0327 | 5.0 | TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require | 2018-10-19 15:44:00 | 2006-01-21 00:03:00 |
| CVE-2006-0325 | 7.5 | Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary comman | 2018-10-19 15:44:00 | 2006-01-20 21:03:00 |
| CVE-2006-0324 | 7.5 | SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php. | 2018-10-19 15:44:00 | 2006-01-19 21:03:00 |
| CVE-2006-0320 | 7.5 | SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameter. | 2018-10-19 15:44:00 | 2006-01-19 01:03:00 |
| CVE-2006-0318 | 7.5 | SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action. | 2018-10-19 15:44:00 | 2006-01-19 01:03:00 |
| CVE-2006-0315 | 5.8 | index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) | 2018-10-19 15:44:00 | 2006-01-19 01:03:00 |
| CVE-2006-0309 | 4.0 | Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length. | 2018-10-19 15:44:00 | 2006-01-19 01:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: