| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-1458 | 7.5 | Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1457 | 7.5 | SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1455 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe. | 2008-09-05 20:30:00 | 2003-06-09 04:00:00 |
| CVE-2002-1483 | 5.0 | db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot). | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1482 | 10.0 | SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry. | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1481 | 7.5 | savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php. | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1480 | 6.8 | Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry. | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1478 | 10.0 | Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1477 | 7.5 | graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode. | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| CVE-2002-1476 | 4.6 | Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 el | 2008-09-05 20:30:00 | 2003-04-22 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: