Vulnerabilities (CVE)

Filtered by vendor Russcom Network Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-2615 1 Russcom Network 1 Russcom.ping 2024-02-04 7.5 HIGH N/A
ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter.
CVE-2006-2159 1 Russcom Network 1 Loginphp 2024-02-04 5.0 MEDIUM N/A
CRLF injection vulnerability in help.php in Russcom Network Loginphp allows remote attackers to spoof e-mails and inject MIME headers via CRLF sequences in the email address.
CVE-2006-2160 1 Russcom Network 1 Loginphp 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inject arbitrary web script or HTML via the username field when registering.
CVE-2006-2588 1 Russcom Network 1 Phpimages 2024-02-04 5.0 MEDIUM N/A
Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability.