| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-1592 | 7.5 | Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript. | 2008-09-05 20:49:00 | 2005-05-16 04:00:00 |
| CVE-2005-1590 | 4.6 | The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection | 2008-09-05 20:49:00 | 2005-05-16 04:00:00 |
| CVE-2005-1587 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary web script or HTML via the sWord parameter. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1586 | 5.0 | Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1584 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1583 | 5.0 | 1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1582 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) nom, (2) email, (3) siteweb, or (4) commentaire variables. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1581 | 4.3 | Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1577 | 7.5 | APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| CVE-2005-1575 | 5.0 | The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160. | 2008-09-05 20:49:00 | 2005-05-14 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: