Lucene search
+L

148 matches found

CVE
CVE
added 2008/08/10 8:00 p.m.43 views

CVE-2008-3568

CVE-2008-3568 describes an absolute path traversal in UNAK-CMS 1.5.5, triggered via a full pathname in the Dirroot parameter of fckeditor/editor/filemanager/browser/default/connectors/php/connector.php, allowing remote inclusion/execution of local files. The connected records confirm the vulnerab...

7.5CVSS7AI score0.02902EPSS
SaveExploits2References4Affected Software1
Circl
Circl
added 2008/08/04 12:00 a.m.7 views

CVE-2008-3568

creationtimestamp| type| source ---|---|--- 2008-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32150...

7.5CVSS5.8AI score0.02902EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2007/07/05 7:30 p.m.22 views

CVE-2007-3568

The LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service infinite loop via a BMP image with a Bits Per Page BPP value of 0...

5CVSS5.9AI score0.01999EPSS
SaveExploits1References1
CVE
CVE
added 2007/07/05 7:00 p.m.53 views

CVE-2007-3568

The CVE-2007-3568 issue affects the imlib library (versions 1.9.15 and older). A context-dependent denial-of-service can be triggered by rendering a BMP with Bits Per Page value 0, causing an infinite loop. Fedora/SUSE advisories indicate a fix in updated packages (e.g., imlib-1.9.15-6.fc7/ -6.fc...

5CVSS6.1AI score0.01999EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2006/07/13 1:05 a.m.16 views

CVE-2006-3568

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 nickname parameters...

4.3CVSS5.9AI score0.02289EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2006/07/13 1:00 a.m.22 views

CVE-2006-3568

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 nickname parameters...

5.9AI score0.02289EPSS
SaveExploits2References7
CVE
CVE
added 2006/07/13 1:00 a.m.48 views

CVE-2006-3568

CVE-2006-3568 affects Fantastic Guestbook, versions 2.0.1 and earlier, with a vulnerability in guestbook.php that allows cross-site scripting via the parameters: first_name, last_name, or nickname. The underlying issue is unsanitized user input in these fields, enabling arbitrary web script or HT...

4.3CVSS6.1AI score0.02289EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2005/11/16 7:37 a.m.67 views

CVE-2005-3568

The CVE-2005-3568 issue affects IBM DB2 Content Manager prior to 8.2 Fix Pack 10, where the db2fmp process can enter a CPU-intensive loop (DoS) when importing a corrupted Microsoft Excel file. The underlying cause is a corrupted Excel file triggering text search processing to loop. Impact is Deni...

2.1CVSS6AI score0.00334EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder