CVE List

Id CVE No. Status Description Phase Votes Comments Actions
36597  CVE-2008-6480  Candidate  Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter.  Assigned (20090316)  None (candidate not yet proposed)    View
102133  CVE-2017-5313  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170109)  None (candidate not yet proposed)    View
36853  CVE-2008-6736  Candidate  Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product"s security documentation.  Assigned (20090421)  None (candidate not yet proposed)    View
102389  CVE-2017-5569  Candidate  An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().  Assigned (20170123)  None (candidate not yet proposed)    View
37109  CVE-2008-6992  Candidate  GreenSQL Firewall (greensql-fw), possibly before 0.9.2 or 0.9.4, allows remote attackers to bypass the SQL injection protection mechanism via a WHERE clause containing an expression such as "x=y=z", which is successfully parsed by MySQL.  Assigned (20090817)  None (candidate not yet proposed)    View

Page 19746 of 20943, showing 5 records out of 104715 total, starting on record 98726, ending on 98730

Actions