| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0175 | 4.3 | Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0174 | 4.0 | Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0173 | 4.0 | Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or u | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0172 | 3.5 | Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0171 | 7.5 | PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0169 | 7.5 | addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory. | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0168 | 4.3 | Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page. | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0167 | 7.5 | SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page. | 2018-10-19 15:43:00 | 2006-01-11 21:03:00 |
| CVE-2006-0156 | 4.3 | Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php. | 2018-10-19 15:43:00 | 2006-01-10 11:03:00 |
| CVE-2006-0015 | 6.8 | Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute | 2018-10-19 15:42:00 | 2006-04-11 23:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: