NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 4342 | CVE-2008-4519 | Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the target parameter to (1) index2.php and (2) index.php. | 2 | 7.5 | High | 2017-01-03 | 2009-01-29 | View | |
| 4598 | CVE-2008-4784 | aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php. | 2 | 7.5 | High | 2017-01-03 | 2009-01-29 | View | |
| 70390 | CVE-2005-4801 | Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php. | 2 | 7.5 | High | 2017-01-03 | 2008-09-05 | View | |
| 70646 | CVE-2004-0190 | Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator"s local system or in a proxy, which allows attackers to steal the password and gain privileges. | 2 | 7.5 | High | 2016-12-20 | 2016-10-17 | View | |
| 5366 | CVE-2008-5624 | PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting of /etc for the error_log variable. | 2 | 7.5 | High | 2017-01-03 | 2009-10-31 | View |
Page 15617 of 17672, showing 5 records out of 88360 total, starting on record 78081, ending on 78085
