Show filters
111 Total Results
Displaying 101-110 of 111
Sort by:
Attacker Value
Unknown
CVE-2008-3401
Disclosure Date: July 31, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
0
Attacker Value
Unknown
CVE-2007-6677
Disclosure Date: January 10, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the comment field in the comment form.
0
Attacker Value
Unknown
CVE-2007-5396
Disclosure Date: November 10, 2007 (last updated October 04, 2023)
Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle (who).
0
Attacker Value
Unknown
CVE-2007-5590
Disclosure Date: October 19, 2007 (last updated October 04, 2023)
Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving (1) IRC options, (2) Jabber forms, and unspecified aspects of the (3) ICQ and (4) Yahoo! instant messaging functionality. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-2632
Disclosure Date: May 13, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php, or (2) certain array parameters to web/phpinfo.php, as demonstrated by 1[] or a[].
0
Attacker Value
Unknown
CVE-2007-0517
Disclosure Date: January 26, 2007 (last updated October 04, 2023)
Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password information via a direct request for pwd.txt.
0
Attacker Value
Unknown
CVE-2006-3537
Disclosure Date: July 12, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in index.php in Randshop before 1.2 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter, a different vector than CVE-2006-3375.
0
Attacker Value
Unknown
CVE-2006-3375
Disclosure Date: July 06, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter.
0
Attacker Value
Unknown
CVE-2006-3374
Disclosure Date: July 06, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attackers to execute arbitrary PHP code via a URL in the incl parameter.
0
Attacker Value
Unknown
CVE-2005-3924
Disclosure Date: November 30, 2005 (last updated February 22, 2025)
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters.
0
