NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
65647 | CVE-2006-7104 | PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created on May 2006, a component for Mambo 4.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. | 2 | 7.5 | High | 2016-12-20 | 2009-04-03 | View | |
70511 | CVE-2004-0042 | vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames. | 2 | 5 | Medium | 2016-12-20 | 2008-09-10 | View | |
72559 | CVE-2004-2182 | Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server. | 2 | 7.5 | High | 2016-12-20 | 2008-09-05 | View | |
73071 | CVE-2004-2694 | Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top". | 2 | 5.8 | Medium | 2016-12-20 | 2016-10-17 | View | |
58991 | CVE-2006-0251 | Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters. | 2 | 4.3 | Medium | 2016-12-20 | 2011-03-07 | View |
Page 640 of 17672, showing 5 records out of 88360 total, starting on record 3196, ending on 3200