PHP-Stats 0.1.9.1b - 'PHP-stats-options.php' Command Execution

126...

CVE-2006-5986

admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting XSS attack without...

CVE-2006-5985

Extreme CMS 0.9 is affected by multiple XSS vulnerabilities in admin/options.php, exploitable via the parameters bg1, bg2, text, or size. The issue is documented with a CVSS v2 base score of 6.8 (MEDIUM) and indicates remote attackers can inject script/HTML; no exploit details or patches are prov...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...