CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0 Last 7 days 2,759 Total CVEs 401,121 CISA KEV 1,731 Critical 42,393 All stats

Page 1

CVE-2007-4541 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_…

CVSS 4.3 EPSS 0.78% Aug 27, 2007

CVE-2007-4540 HIGH

Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_R…

CVSS 7.5 EPSS 1.25% Aug 27, 2007

CVE-2007-4454 MEDIUM

Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version…

CVSS 6.8 EPSS 2.35% Aug 21, 2007

CVE-2007-4421 HIGH

SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.

CVSS 9.3 EPSS 2.25% Aug 18, 2007

CVE-2007-4419 HIGH

Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which…

CVSS 9.3 EPSS 4.83% Aug 18, 2007

CVE-2006-5145 HIGH

Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.ph…

CVSS 7.5 EPSS 1.12% Oct 2, 2006

CVE-2006-5144 MEDIUM

Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the descri…

CVSS 6.8 EPSS 1.29% Oct 2, 2006

CVE-2006-3342 LOW

Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query…

CVSS 2.6 EPSS 1.40% Jul 3, 2006

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2007-4541	Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_…	MEDIUM	4.3	0.78%	Aug 27, 2007
CVE-2007-4540	Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_R…	HIGH	7.5	1.25%	Aug 27, 2007
CVE-2007-4454	Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version…	MEDIUM	6.8	2.35%	Aug 21, 2007
CVE-2007-4421	SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL commands via an OD3_AutoLogin cookie.	HIGH	9.3	2.25%	Aug 18, 2007
CVE-2007-4419	Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which…	HIGH	9.3	4.83%	Aug 18, 2007
CVE-2006-5145	Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.ph…	HIGH	7.5	1.12%	Oct 2, 2006
CVE-2006-5144	Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the descri…	MEDIUM	6.8	1.29%	Oct 2, 2006
CVE-2006-3342	Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query…	LOW	2.6	1.40%	Jul 3, 2006

Rows per page

Showing 1 to 8 CVEs · page 1