NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 82603 | CVE-2017-6065 | SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter. | 2 | 6.5 | Medium | 2017-02-28 | 2017-02-23 | View | |
| 82604 | CVE-2017-6070 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form. | 2 | 7.5 | High | 2017-02-28 | 2017-02-23 | View | |
| 82605 | CVE-2017-6071 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml. | 2 | 5 | Medium | 2017-02-28 | 2017-02-23 | View | |
| 82861 | CVE-2016-9682 | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component responsible for emailing out information about the state of the system. The application doesn"t properly escape the information passed in the "tsrDeleteRestartedFile" or "currentTSREmailTo" variables before making a call to system(), allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. | 2 | 10 | High | 2017-02-28 | 2017-02-23 | View | |
| 82606 | CVE-2017-6072 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin. | 2 | 5 | Medium | 2017-02-28 | 2017-02-23 | View |
Page 2102 of 17672, showing 5 records out of 88360 total, starting on record 10506, ending on 10510
