| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4213 | 7.5 | SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie. | 2018-10-19 15:40:00 | 2005-12-14 11:03:00 |
| CVE-2005-4212 | 5.0 | Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (dot dot) sequences in the $_CCFG[_PKG_PATH_DBSE] variable. | 2018-10-19 15:40:00 | 2005-12-14 11:03:00 |
| CVE-2005-4211 | 7.5 | PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $_CCFG[_PKG_PATH_DBSE] variable. | 2018-10-19 15:40:00 | 2005-12-14 11:03:00 |
| CVE-2005-4208 | 5.0 | Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00) in the id parameter of the read module. | 2018-10-19 15:40:00 | 2005-12-13 11:03:00 |
| CVE-2005-4207 | 7.5 | SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields. | 2018-10-19 15:40:00 | 2005-12-13 11:03:00 |
| CVE-2005-4199 | 7.5 | Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) sho | 2018-10-19 15:40:00 | 2005-12-13 11:03:00 |
| CVE-2005-4197 | 7.5 | tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet. | 2018-10-19 15:40:00 | 2005-12-13 11:03:00 |
| CVE-2005-4195 | 7.5 | Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.ph | 2018-10-19 15:40:00 | 2005-12-13 11:03:00 |
| CVE-2005-4176 | 2.1 | AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory. | 2018-10-19 15:40:00 | 2005-12-11 21:03:00 |
| CVE-2005-4175 | 2.1 | Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory. | 2018-10-19 15:40:00 | 2005-12-11 21:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: