| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-2932 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action.
|
30-06-2021 - 05:15 | 31-05-2007 - 00:30 | |
| CVE-2007-1055 | 6.8 |
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a dup
|
19-10-2018 - 18:08 | 21-02-2007 - 23:28 | |
| CVE-2005-4437 | 7.5 |
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message
|
19-10-2018 - 15:40 | 21-12-2005 - 01:03 | |
| CVE-2006-3832 | 7.5 |
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
17-10-2018 - 21:31 | 25-07-2006 - 13:22 | |
| CVE-2007-2962 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter.
|
16-10-2018 - 16:46 | 31-05-2007 - 23:30 | |
| CVE-2007-2913 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
|
16-10-2018 - 16:46 | 30-05-2007 - 10:30 | |
| CVE-2007-2887 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
|
16-10-2018 - 16:46 | 30-05-2007 - 01:30 | |
| CVE-2007-2915 | 4.3 |
Cross-site scripting (XSS) vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email.
|
16-10-2018 - 16:46 | 30-05-2007 - 10:30 | |
| CVE-2007-2959 | 7.5 |
SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id_manufacturer parameter.
|
16-10-2018 - 16:46 | 31-05-2007 - 23:30 | |
| CVE-2007-2916 | 4.3 |
Cross-site scripting (XSS) vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter.
|
16-10-2018 - 16:46 | 30-05-2007 - 10:30 | |
| CVE-2007-1054 | 6.8 |
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, whi
|
16-10-2018 - 16:36 | 21-02-2007 - 23:28 | |
| CVE-2007-0693 | 6.8 |
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).
|
16-10-2018 - 16:33 | 30-05-2007 - 20:30 | |
| CVE-2007-0692 | 5.0 |
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
|
16-10-2018 - 16:33 | 30-05-2007 - 20:30 | |
| CVE-2007-0690 | 5.0 |
myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login.php, or an invalid (2) view[] or (3) monthno[] parameter to myevent.php, which reveals the path in various error messages.
|
16-10-2018 - 16:33 | 30-05-2007 - 20:30 | |
| CVE-2007-5640 | 7.1 |
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager (BCM), Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registrati
|
15-10-2018 - 21:45 | 23-10-2007 - 17:46 | |
| CVE-2011-2179 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command ac
|
29-08-2017 - 01:29 | 14-06-2011 - 17:55 | |
| CVE-2008-4108 | 7.2 |
Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which
|
08-08-2017 - 01:32 | 18-09-2008 - 17:59 |