| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0216 | 5.0 | admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters" to the cpage parameter. | 2008-09-05 20:58:00 | 2006-01-16 19:03:00 |
| CVE-2006-0215 | 4.3 | Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: this issue might be resultant from CVE-2006-0216. | 2008-09-05 20:58:00 | 2006-01-16 19:03:00 |
| CVE-2006-0157 | 5.0 | settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password st | 2008-09-05 20:58:00 | 2006-01-10 11:03:00 |
| CVE-2006-0138 | 5.0 | aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the default file-transfer port (TCP 6891). | 2008-09-05 20:58:00 | 2006-01-09 11:03:00 |
| CVE-2006-0130 | 7.5 | Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting | 2008-09-05 20:58:00 | 2006-01-09 11:03:00 |
| CVE-2006-0113 | 5.0 | Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message. | 2008-09-05 20:58:00 | 2006-01-07 01:03:00 |
| CVE-2006-0098 | 4.6 | The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/. | 2008-09-05 20:58:00 | 2006-01-06 11:03:00 |
| CVE-2006-0073 | 4.3 | Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, which is not properly sanitized from the resulting | 2008-09-05 20:58:00 | 2006-01-04 00:03:00 |
| CVE-2006-0072 | 7.5 | Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector. | 2008-09-05 20:58:00 | 2006-01-04 00:03:00 |
| CVE-2006-0071 | 6.6 | The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0. | 2008-09-05 20:58:00 | 2006-01-04 00:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: