43 matches found
CVE-2008-6103: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...
6.8CVSS6.4AI score0.02015EPSS
SaveExploits2References2
CVE-2008-6037: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...
7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
CVE-2003-0156: Undefined Security Weakness
Directory traversal vulnerability in Cross-Referencing Linux LXR allows remote attackers to read arbitrary files via .. dot dot sequences in the v parameter...
5CVSS6AI score0.04307EPSS
SaveExploits0References1
20