| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1677 | 6.4 |
MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php.
|
14-02-2024 - 01:17 | 11-04-2006 - 00:02 | |
| CVE-2006-1676 | 6.4 |
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a d
|
14-02-2024 - 01:17 | 11-04-2006 - 00:02 | |
| CVE-2014-4617 | 5.0 |
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte seq
|
30-10-2018 - 16:27 | 25-06-2014 - 11:19 | |
| CVE-2008-0073 | 6.8 |
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
|
08-08-2017 - 01:29 | 24-03-2008 - 22:44 | |
| CVE-2003-1286 | 7.5 |
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection:
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1284 | 5.0 |
Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) environ.pl and (2) testcgi.exe.
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1287 | 4.6 |
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read the code from the associated device.
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1285 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query paramet
|
11-07-2017 - 01:29 | 31-12-2003 - 05:00 |