CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 15859 | CVE-2005-4655 | Candidate | Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as "<me<meta>ta" and "<sc<script>ript>". | Assigned (20060116) | None (candidate not yet proposed) | View | |
| 81395 | CVE-2015-4118 | Candidate | SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users with monitor permissions to execute arbitrary SQL commands via the server parameter. NOTE: this can be leveraged by remote attackers using CVE-2015-4119.2. | Assigned (20150528) | None (candidate not yet proposed) | View | |
| 16115 | CVE-2006-0011 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20051109) | None (candidate not yet proposed) | View | |
| 81651 | CVE-2015-4374 | Candidate | Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient (To) address of an email. | Assigned (20150605) | None (candidate not yet proposed) | View | |
| 16371 | CVE-2006-0267 | Candidate | Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB20. | Assigned (20060118) | None (candidate not yet proposed) | View |
Page 19925 of 20943, showing 5 records out of 104715 total, starting on record 99621, ending on 99625
