2634 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component...
CVE-2008-7030
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be...
CVE-2008-4408
Cross-site scripting XSS vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component...
Directory traversal
Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter to an unspecified component...
CVE-2007-5465
Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter to an unspecified component...
Sql injection
SQL injection vulnerability in Coppermine Photo Gallery CPG before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an album password cookie to an unspecified component...
CVE-2026-23589
CVE-2026-23589 is rejected and not used; it was withdrawn by the requester.
CVE-2026-75890
This CVE ID is rejected as a duplicate of CVE-2026-50236 and does not represent an active vulnerability entry. No remediation or risk assessment applies. CVE-2026-50236 is the valid reference for this finding.
CVE-2026-74226
CVE-2026-74226 has no description, metrics, or references in the provided documents; technical details are not publicly available. Monitor for future updates from CVE sources.