Show filters
24 Total Results
Displaying 11-20 of 24
Sort by:
Attacker Value
Unknown
CVE-2007-4071
Disclosure Date: July 30, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter.
0
Attacker Value
Unknown
CVE-2007-4073
Disclosure Date: July 30, 2007 (last updated October 04, 2023)
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of forged e-mail. NOTE: this could be leveraged for spam or phishing attacks.
0
Attacker Value
Unknown
CVE-2007-4072
Disclosure Date: July 30, 2007 (last updated October 04, 2023)
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obtain sensitive information by viewing the HTML source, as demonstrated by viewing the source generated from index.php.
0
Attacker Value
Unknown
CVE-2006-5607
Disclosure Date: October 30, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified dot dot) sequences in the getpage parameter.
0
Attacker Value
Unknown
CVE-2006-5321
Disclosure Date: October 17, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-5322
Disclosure Date: October 17, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-5294
Disclosure Date: October 16, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTML via the unsubscribeemail parameter.
0
Attacker Value
Unknown
CVE-2006-1746
Disclosure Date: April 12, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable.
0
Attacker Value
Unknown
CVE-2005-3555
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter in the (1) editattributes or (2) admin page.
0
Attacker Value
Unknown
CVE-2005-3556
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php.
0
