| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0212 | 5.0 | Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ seq | 2018-10-19 15:43:00 | 2006-01-14 01:03:00 |
| CVE-2006-0211 | 4.3 | Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the txtEmailAddress parameter. | 2018-10-19 15:43:00 | 2006-01-14 01:03:00 |
| CVE-2006-0210 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page. | 2018-10-19 15:43:00 | 2006-01-14 01:03:00 |
| CVE-2006-0209 | 7.5 | SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL commands via the (1) livestock_id parameter to showInfo.php and (2) tank_id parameter, possibly to livestock.php. | 2018-10-19 15:43:00 | 2006-01-14 01:03:00 |
| CVE-2006-0205 | 5.1 | Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) ha | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| CVE-2006-0204 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain oth | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| CVE-2006-0203 | 5.0 | membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter. | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| CVE-2006-0199 | 7.5 | SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter. | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| CVE-2006-0198 | 4.3 | Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment. | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| CVE-2006-0197 | 5.0 | The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X server and (2) Xlib, uses a "long" specifier for elements of the l array, which results in inconsistent sizes in the struct on 32-bit v | 2018-10-19 15:43:00 | 2006-01-13 23:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: