| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2008-1757 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter. | 2018-10-11 20:36:00 | 2008-04-12 20:05:00 |
| CVE-2008-1753 | 4.3 | Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510. | 2018-10-11 20:36:00 | 2008-04-11 21:05:00 |
| CVE-2008-1733 | 7.5 | SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php. | 2018-10-11 20:36:00 | 2008-04-11 19:05:00 |
| CVE-2008-1724 | 9.3 | Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrar | 2018-10-11 20:36:00 | 2008-04-11 19:05:00 |
| CVE-2008-1717 | 5.0 | WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found. | 2018-10-11 20:36:00 | 2008-04-09 21:05:00 |
| CVE-2008-1716 | 4.3 | Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page and (2) form parameters, which are not properly handled | 2018-10-11 20:36:00 | 2008-04-09 21:05:00 |
| CVE-2008-1708 | 4.3 | IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field. | 2018-10-11 20:36:00 | 2008-04-09 19:05:00 |
| CVE-2008-1707 | 4.3 | IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a packet with an 0x11 value in a certain "type" field. | 2018-10-11 20:36:00 | 2008-04-09 19:05:00 |
| CVE-2008-1706 | 4.3 | Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large value in a certain 32-bit field. | 2018-10-11 20:36:00 | 2008-04-09 19:05:00 |
| CVE-2008-1705 | 6.8 | Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields. | 2018-10-11 20:36:00 | 2008-04-09 19:05:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: