Show filters
555 Total Results
Displaying 541-550 of 555
Sort by:
Attacker Value
Unknown
CVE-2006-5800
Disclosure Date: November 08, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2006-4279
Disclosure Date: August 21, 2006 (last updated October 04, 2023)
SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topic parameter.
0
Attacker Value
Unknown
CVE-2006-4161
Disclosure Date: August 16, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
0
Attacker Value
Unknown
CVE-2006-4025
Disclosure Date: August 09, 2006 (last updated October 04, 2023)
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) bday_day, (2) bday_month, and (3) bday_year parameters in the personal section.
0
Attacker Value
Unknown
CVE-2006-3241
Disclosure Date: June 27, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter.
0
Attacker Value
Unknown
CVE-2006-3077
Disclosure Date: June 19, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in guestbook.cfm in aXentGuestbook 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter.
0
Attacker Value
Unknown
CVE-2006-3080
Disclosure Date: June 19, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in viewposts.cfm in aXentForum II and earlier allows remote attackers to inject arbitrary web script or HTML via the startrow parameter.
0
Attacker Value
Unknown
CVE-2002-0434
Disclosure Date: July 26, 2002 (last updated February 22, 2025)
Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
0
Attacker Value
Unknown
CVE-2001-1214
Disclosure Date: December 15, 2001 (last updated February 22, 2025)
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.
0
Attacker Value
Unknown
CVE-2001-0645
Disclosure Date: September 20, 2001 (last updated February 22, 2025)
Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.
0
