| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4049 | 7.5 | Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php. | 2018-10-19 15:40:00 | 2005-12-07 11:03:00 |
| CVE-2005-4023 | 5.0 | Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors. | 2018-10-19 15:40:00 | 2005-12-05 11:03:00 |
| CVE-2005-4022 | 4.3 | Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. | 2018-10-19 15:40:00 | 2005-12-05 11:03:00 |
| CVE-2005-4021 | 5.0 | The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. | 2018-10-19 15:40:00 | 2005-12-05 11:03:00 |
| CVE-2005-4011 | 7.5 | SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | 2018-10-19 15:39:00 | 2005-12-05 11:03:00 |
| CVE-2005-3997 | 2.6 | Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, | 2018-10-19 15:39:00 | 2005-12-05 00:03:00 |
| CVE-2005-3996 | 5.1 | SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter. | 2018-10-19 15:39:00 | 2005-12-05 00:03:00 |
| CVE-2005-3995 | 5.1 | Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name | 2018-10-19 15:39:00 | 2005-12-05 00:03:00 |
| CVE-2005-3991 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php. | 2018-10-19 15:39:00 | 2005-12-04 23:03:00 |
| CVE-2005-3984 | 7.5 | SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time_range parameter to edit_report_handler.php. NOTE: the startid/activity_log.php vector is already covered by CVE-2005-3949. | 2018-10-19 15:39:00 | 2005-12-04 11:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: