| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-1005 | 6.4 | agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter. NOTE: the provenance of this information is unknown; the details are obtained from t | 2008-09-05 21:00:00 | 2006-03-06 20:06:00 |
| CVE-2006-0942 | 7.5 | SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509. | 2008-09-05 21:00:00 | 2006-03-01 02:02:00 |
| CVE-2006-0935 | 2.6 | Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz. | 2008-09-05 21:00:00 | 2006-02-28 11:02:00 |
| CVE-2006-0895 | 5.0 | NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php. | 2008-09-05 21:00:00 | 2006-02-25 11:02:00 |
| CVE-2006-0894 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the html_error_occurred parameter in error.php, (2) html_filter_select parameter in filter_prefs.php, (3) ht | 2008-09-05 21:00:00 | 2006-02-25 11:02:00 |
| CVE-2006-0893 | 5.0 | NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and (2) the tmp directory, which lists names of uploaded att | 2008-09-05 21:00:00 | 2006-02-25 11:02:00 |
| CVE-2006-0892 | 7.5 | NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via directory traversal vulnerabilities. | 2008-09-05 21:00:00 | 2006-02-25 11:02:00 |
| CVE-2006-0718 | 5.0 | The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAK | 2008-09-05 21:00:00 | 2006-02-15 21:02:00 |
| CVE-2006-0668 | 7.5 | SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module. NOTE: the provenance of this information is unknown; the de | 2008-09-05 20:59:00 | 2006-02-13 22:02:00 |
| CVE-2006-0646 | 4.4 | ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the | 2008-09-05 20:59:00 | 2006-02-11 11:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: