NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
63544 | CVE-2006-4936 | Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors. | 2 | 10 | High | 2016-12-20 | 2008-09-05 | View | |
63800 | CVE-2006-5194 | Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information. | 2 | 4.3 | Medium | 2016-12-20 | 2011-03-07 | View | |
64056 | CVE-2006-5455 | Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 allows user-assisted remote attackers to create, modify, or delete arbitrary bug reports via a crafted URL. | 2 | 2.6 | Low | 2016-12-20 | 2011-03-07 | View | |
64312 | CVE-2006-5737 | PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions. | 2 | 7.2 | High | 2016-12-20 | 2008-09-05 | View | |
64568 | CVE-2006-6007 | save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter. | 2 | 5 | Medium | 2016-12-20 | 2008-09-05 | View |
Page 322 of 17672, showing 5 records out of 88360 total, starting on record 1606, ending on 1610