| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0241 | 5.0 | Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field. | 2018-10-19 15:43:00 | 2006-01-18 01:07:00 |
| CVE-2006-0239 | 5.8 | Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts. | 2018-10-19 15:43:00 | 2006-01-18 01:07:00 |
| CVE-2006-0236 | 5.1 | GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that | 2018-10-19 15:43:00 | 2006-01-18 01:07:00 |
| CVE-2006-0235 | 7.5 | SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php. | 2018-10-19 15:43:00 | 2006-01-18 01:07:00 |
| CVE-2006-0234 | 7.5 | SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. | 2018-10-19 15:43:00 | 2006-01-18 00:07:00 |
| CVE-2006-0233 | 4.3 | Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag. | 2018-10-19 15:43:00 | 2006-01-18 00:07:00 |
| CVE-2006-0229 | 2.1 | Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key. | 2018-10-19 15:43:00 | 2006-01-17 21:03:00 |
| CVE-2006-0222 | 4.3 | Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter. | 2018-10-19 15:43:00 | 2006-01-16 21:03:00 |
| CVE-2006-0221 | 7.5 | SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS) allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password. | 2018-10-19 15:43:00 | 2006-01-16 21:03:00 |
| CVE-2006-0220 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the day parameter in calendar.php and (2) the input form in search.php. NOTE: the provenance of | 2018-10-19 15:43:00 | 2006-01-16 21:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: