Show filters
102 Total Results
Displaying 51-60 of 102
Sort by:
Attacker Value
Unknown
CVE-2008-6698
Disclosure Date: April 10, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
0
Attacker Value
Unknown
CVE-2008-6697
Disclosure Date: April 10, 2009 (last updated October 04, 2023)
SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
0
Attacker Value
Unknown
CVE-2008-4731
Disclosure Date: October 24, 2008 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2008-4136
Disclosure Date: September 24, 2008 (last updated October 04, 2023)
Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service crash) via multiple RETR commands, possibly involving long filenames.
0
Attacker Value
Unknown
CVE-2007-5457
Disclosure Date: October 14, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) install.joomla_flash_uploader.php and (2) uninstall.joomla_flash_uploader.php.
0
Attacker Value
Unknown
CVE-2007-4532
Disclosure Date: August 25, 2007 (last updated October 04, 2023)
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.
0
Attacker Value
Unknown
CVE-2007-4531
Disclosure Date: August 25, 2007 (last updated October 04, 2023)
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (crash) via (1) a long string to the file transfer port or (2) a long chat message, or (3) a server denial of service (continuous beep and slowdown) via a string containing many 0x07 or other control characters to the file transfer port.
0
Attacker Value
Unknown
CVE-2007-2941
Disclosure Date: May 31, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) vbgsitemap/vbgsitemap-config.php or (2) vbgsitemap/vbgsitemap-vbseo.php.
0
Attacker Value
Unknown
CVE-2007-0627
Disclosure Date: January 31, 2007 (last updated October 04, 2023)
Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process.
0
Attacker Value
Unknown
CVE-2007-0121
Disclosure Date: January 09, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
0
