| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0105 | 5.0 | PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests. | 2018-10-19 15:42:00 | 2006-01-10 20:03:00 |
| CVE-2006-0155 | 4.3 | Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI. | 2018-10-19 15:42:00 | 2006-01-10 11:03:00 |
| CVE-2006-0154 | 7.5 | SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter. | 2018-10-19 15:42:00 | 2006-01-10 11:03:00 |
| CVE-2006-0153 | 7.5 | 427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie. | 2018-10-19 15:42:00 | 2006-01-10 11:03:00 |
| CVE-2006-0150 | 7.5 | Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username. | 2018-10-19 15:42:00 | 2006-01-09 23:03:00 |
| CVE-2006-0147 | 7.5 | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and ( | 2018-10-19 15:42:00 | 2006-01-09 23:03:00 |
| CVE-2006-0146 | 7.5 | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, | 2018-10-19 15:42:00 | 2006-01-09 23:03:00 |
| CVE-2006-0145 | 4.6 | The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and | 2018-10-19 15:42:00 | 2006-01-09 23:03:00 |
| CVE-2006-0144 | 7.5 | The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malici | 2018-10-19 15:42:00 | 2006-01-09 23:03:00 |
| CVE-2006-0140 | 4.3 | Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags. | 2018-10-19 15:42:00 | 2006-01-09 19:07:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: