| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-3557 | 5.0 | Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) in the selected%5B%5D parameter in an HTTP POST request. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3556 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3555 | 6.5 | Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3551 | 5.0 | toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3550 | 5.0 | Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3549 | 6.5 | Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now". | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3548 | 4.0 | Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a .. (dot dot) in the "Task PHP File To Run" field. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3547 | 4.3 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3545 | 7.5 | SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. | 2018-10-19 15:37:00 | 2005-11-16 07:42:00 |
| CVE-2005-3539 | 7.5 | Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and | 2018-10-19 15:36:00 | 2005-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: