CWE-94 · Code Injection (page 76)
Page 76 of 76 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-2287 | | 2002-12-31 | PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP… | |
CVE-2002-2249 | | 2002-12-31 | PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend… | |
CVE-2002-2019 | | 2002-12-31 | PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code v… | |
CVE-2002-1991 | | 2002-12-31 | PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php. | |
CVE-2002-1753 | | 2002-12-31 | csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is process… | |
CVE-2002-1752 | | 2002-12-31 | csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eva… | |
CVE-2002-1750 | | 2002-12-31 | csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl… | |
CVE-2002-0495 | | 2002-08-12 | csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwr… | |
CVE-2001-0308 | | 2001-05-03 | UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet… | |
CVE-2001-0307 | | 2001-05-03 | Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for… | |
CVE-2000-0155 | | 2000-02-18 | Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other use… | |
CVE-1999-0702 | | 1999-09-10 | Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vuln… | |
CVE-1999-0891 | | 1999-09-01 | The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect. | |
CVE-1999-0491 | | 1999-04-20 | The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute. | |
CVE-1999-0509 | | 1996-05-29 | Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands. |