| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1107 | 4.3 |
Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.
|
14-02-2024 - 01:17 | 09-03-2006 - 13:06 | |
| CVE-2006-1108 | 7.5 |
SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
14-02-2024 - 01:17 | 09-03-2006 - 13:06 | |
| CVE-2006-4820 | 2.1 |
Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
|
17-10-2018 - 21:39 | 15-09-2006 - 21:07 | |
| CVE-2007-2147 | 10.0 |
admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct
|
16-10-2018 - 16:42 | 19-04-2007 - 10:19 | |
| CVE-2007-2149 | 10.0 |
Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and recommends 0666 or 0777 permissions for these files, which allows local users to gain privil
|
16-10-2018 - 16:42 | 19-04-2007 - 10:19 | |
| CVE-2007-2148 | 6.5 |
Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html files via the html parameter, as demonstrated by head.ht
|
16-10-2018 - 16:42 | 19-04-2007 - 10:19 | |
| CVE-2008-0508 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting
|
15-10-2018 - 22:00 | 31-01-2008 - 20:00 | |
| CVE-2008-5073 | 9.3 |
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.
|
11-10-2018 - 20:53 | 14-11-2008 - 18:07 |