| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0137 | 7.5 | SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0136 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster, (2) comment_poste | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0135 | 7.5 | SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable). | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0134 | 4.3 | Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0133 | 3.6 | Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0132 | 5.0 | Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute arbitrary local PHP scripts, and possibly read other types of files, via a .. (dot dot) and a trailing null in t | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0131 | 5.0 | boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0124 | 4.3 | Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0123 | 7.5 | Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| CVE-2006-0116 | 5.0 | Cross-site scripting vulnerability search.inetstore in iNETstore Ebusiness Software 2.0 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter. | 2018-10-19 15:42:00 | 2006-01-09 11:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: