| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0110 | 4.3 | Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter. | 2018-10-19 15:42:00 | 2006-01-07 00:03:00 |
| CVE-2006-0106 | 7.5 | gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile (WMF) files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but | 2018-10-19 15:42:00 | 2006-01-06 18:03:00 |
| CVE-2006-0104 | 5.0 | Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.ph | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0103 | 5.0 | TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0102 | 4.3 | Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php. | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0100 | 4.6 | Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in the "Name of site" field of an FTP account. NOTE: because this program executes with the privileges of the invoking user, and beca | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0097 | 7.5 | Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitrary code via a long (1) arg_host or (2) arg_unix_socket argument, as demonstrated by a long | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0095 | 2.1 | dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key. | 2018-10-19 15:42:00 | 2006-01-06 11:03:00 |
| CVE-2006-0088 | 7.5 | SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter. | 2018-10-19 15:42:00 | 2006-01-05 11:03:00 |
| CVE-2006-0087 | 7.5 | SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 2018-10-19 15:42:00 | 2006-01-05 11:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: