| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-3824 | 5.0 | The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action. | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3823 | 7.5 | The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function. | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3822 | 7.5 | Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts modu | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3821 | 4.3 | Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name. | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3820 | 6.4 | Multiple directory traversal vulnerabilities in index.php in vTiger CRM 4.2 and earlier allow remote attackers to read or include arbitrary files, an ultimately execute arbitrary PHP code, via .. (dot dot) and null byte ("%00") sequences in the (1) m | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3819 | 7.5 | Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the (1) user_name and (2) date parameter in the HelpDesk module. | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3818 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) various input fields, including the contact, lead, and first or last name fields, (2) the record p | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3813 | 4.0 | IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3 | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3812 | 6.8 | freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing arguments. | 2018-10-19 15:39:00 | 2005-11-26 02:03:00 |
| CVE-2005-3792 | 7.5 | Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type. | 2018-10-19 15:39:00 | 2005-11-24 11:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: