| Max CVSS | 10.0 | Min CVSS | 4.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-5629 | 7.5 |
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that t
|
17-10-2018 - 21:44 | 31-10-2006 - 22:07 | |
| CVE-2006-5543 | 5.1 |
PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
|
17-10-2018 - 21:43 | 26-10-2006 - 17:07 | |
| CVE-2006-5495 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php
|
17-10-2018 - 21:43 | 25-10-2006 - 10:07 | |
| CVE-2007-0310 | 5.0 |
BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.
|
16-10-2018 - 16:32 | 18-01-2007 - 00:28 | |
| CVE-2001-0046 | 4.6 |
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Pe
|
12-10-2018 - 21:30 | 16-02-2001 - 05:00 | |
| CVE-2006-5521 | 7.5 |
PHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter.
|
19-10-2017 - 01:29 | 26-10-2006 - 16:07 | |
| CVE-2006-5519 | 6.8 |
PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
|
19-10-2017 - 01:29 | 26-10-2006 - 16:07 | |
| CVE-2006-5523 | 7.5 |
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter.
|
19-10-2017 - 01:29 | 26-10-2006 - 16:07 | |
| CVE-2006-5510 | 6.4 |
Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.
|
19-10-2017 - 01:29 | 25-10-2006 - 22:07 | |
| CVE-2008-6527 | 7.5 |
SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter.
|
29-09-2017 - 01:33 | 25-03-2009 - 18:30 | |
| CVE-2006-4509 | 10.0 |
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
|
20-07-2017 - 01:33 | 24-10-2006 - 19:07 | |
| CVE-2006-4510 | 10.0 |
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted,
|
20-07-2017 - 01:33 | 24-10-2006 - 19:07 | |
| CVE-2006-4177 | 7.5 |
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.
|
20-07-2017 - 01:32 | 24-10-2006 - 20:07 | |
| CVE-2016-6147 | 10.0 |
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.
|
28-11-2016 - 20:30 | 05-08-2016 - 14:59 | |
| CVE-2013-3470 | 5.0 |
The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731.
|
04-11-2016 - 19:46 | 30-08-2013 - 01:55 |