Show filters
284 Total Results
Displaying 251-260 of 284
Sort by:
Attacker Value
Unknown
CVE-2007-3212
Disclosure Date: June 14, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewmode, (2) fid, and (3) sort_dir parameters, different vectors than CVE-2005-4460.
0
Attacker Value
Unknown
CVE-2007-1954
Disclosure Date: April 11, 2007 (last updated October 04, 2023)
Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .gz, (2) .jar, (3) .rar, (4) .tar.gz, (5) .zip, or (6) .tar file.
0
Attacker Value
Unknown
CVE-2007-0097
Disclosure Date: January 05, 2007 (last updated October 04, 2023)
Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories.
0
Attacker Value
Unknown
CVE-2006-6353
Disclosure Date: December 07, 2006 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS thread crashes, as discovered with the "iSec Partners FileP fuzzer".
0
Attacker Value
Unknown
CVE-2006-5493
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
0
Attacker Value
Unknown
CVE-2006-3985
Disclosure Date: August 05, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.
0
Attacker Value
Unknown
CVE-2006-3565
Disclosure Date: July 13, 2006 (last updated October 04, 2023)
SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the fields[] parameter.
0
Attacker Value
Unknown
CVE-2006-3564
Disclosure Date: July 13, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the email, (2) cond, or (3) name parameters to (a) addressbook.view.php, (4) the daysprune parameter to (b) index.php, (5) the data[to] parameter to (c) compose.email.php, and (6) the markas parameter to (d) read.markas.php.
0
Attacker Value
Unknown
CVE-2006-3566
Disclosure Date: July 13, 2006 (last updated October 04, 2023)
search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to the (1) searchdate and (2) folderids parameters.
0
Attacker Value
Unknown
CVE-2006-3266
Disclosure Date: June 27, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) header parameter to (a) conad/include/rootGui.inc.php and (b) include/rootGui.inc.php; (2) mysqlCall parameter to (c) conad/changeEmail.inc.php, (d) conad/changeUserDetails.inc.php, (e) conad/checkPasswd.inc.php, (f) conad/login.inc.php and (g) conad/logout.inc.php; (3) mysqlcall parameter to (h) include/listall.inc.php; (4) prefix parameter to (i) show/index.php; and (5) config parameter to (j) conad/include/mysqlCall.inc.php.
0
