Lucene search
+L

4705 matches found

seebug.org
seebug.org
•added 2007/04/04 12:00 a.m.•31 views

XOOPS Module Rha7 Downloads 1.0 (visit.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads 1.0 visit.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.rha7.com/ , www.xoops.org/modules/repository/singlefile.php?cid=92&lid=1525 $$ : Free .. :...

7.1AI score
SaveExploits0
Prion
Prion
•added 2007/03/20 8:19 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948...

4.3CVSS6AI score0.01704EPSS
SaveExploits3References5Affected Software1
NVD
NVD
•added 2007/03/20 8:19 p.m.•27 views

CVE-2007-1519

Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948...

4.3CVSS5.6AI score0.01125EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2007/03/20 8:00 p.m.•41 views

CVE-2007-1519

Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948...

5.6AI score0.01125EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/03/20 12:00 a.m.•5 views

CVE-2007-1519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948...

4.3CVSS6AI score0.01125EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2007/03/20 12:00 a.m.•22 views

PT-2007-2909 · Php Nuke · Php-Nuke

Name of the Vulnerable Software and Affected Versions: PHP-Nuke versions 8.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module. Recommendations: For PHP-Nuk...

4.3CVSS5.5AI score0.01125EPSS
SaveExploits1References7
Exploit DB
Exploit DB
•added 2007/03/16 12:00 a.m.•34 views

Creative Files 1.2 - 'kommentare.php' SQL Injection

======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

7.5CVSS5.8AI score0.01173EPSS
SaveExploits1
Exploit DB
Exploit DB
•added 2006/12/26 12:00 a.m.•236 views

myPHPCalendar 10192000b - 'cal_dir' Remote File Inclusion

script name : myPHPCalendar Script Downloads : http://freshmeat.net/projects/myphpcalendar/ Web Site : http://myphpcalendar.sourceforge.net/ Version : 10.1 Risk : High Found By : Cr@zyKing Thanks : | eTNR | ApAci | Eno7 | TheHacker | Kormali46 | TheBekir | Metallicali | Liz0zim | ERNE | SwatHack ...

7.5CVSS5.8AI score0.02385EPSS
SaveExploits2
attackerkb
attackerkb
•added 2006/12/02 11:28 a.m.•6 views

CVE-2006-6233

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...

7.5CVSS6.3AI score0.01148EPSS
SaveExploits0References4
NVD
NVD
•added 2006/12/02 11:28 a.m.•16 views

CVE-2006-6233

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...

7.5CVSS8.4AI score0.01148EPSS
SaveExploits0References3
CVE
CVE
•added 2006/12/02 11:00 a.m.•56 views

CVE-2006-6233

The CVE refers to an SQL injection in the Downloads module of PostNuke (unknown versions). The vulnerability is triggered by the lid parameter in a viewdownloaddetails operation, potentially arising from the viewdownloaddetails function in dl-downloaddetails.php. Impact is partial confidentiality...

7.5CVSS8.8AI score0.01148EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2006/12/02 11:00 a.m.•30 views

CVE-2006-6233

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...

8.4AI score0.01148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/02 12:00 a.m.•4 views

CVE-2006-6233: Undefined Security Weakness

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...

7.5CVSS6.3AI score0.01148EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/11/30 12:00 a.m.•38 views

US-CERT Technical Cyber Security Alert TA06-333A -- Apple Releases Security Update to Address Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-333A Apple Releases Security Update to Address Multiple Vulnerabilities Original release date: November 29, 2006 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version...

SaveExploits0
exploitpack
exploitpack
•added 2006/11/22 12:00 a.m.•29 views

NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow

NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow source: https://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it...

0.7AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/11/08 12:00 a.m.•39 views

iPrimal Forums Remote File Inclusion

iPrimal Forums Remote File Inclusion Download:http://ipigroup.org/downloads/forums.zip Found by Bl0od3r Vulnerable Code: line 126-129 ..... if$GET'p' == '' echo 'Please select an item from the menu above.'; else include$GET'p'.'.php'; ..... Affected File: /admin/index.php = Vulnerability:...

1.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/02 12:00 a.m.•7 views

CVE-2006-5121: Undefined Security Weakness

SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter...

7.5CVSS6.4AI score0.01355EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2006/08/10 12:00 a.m.•22 views

SaveWebPortal 3.4 - page Remote File Inclusion

SaveWebPortal 3.4 - page Remote File Inclusion -------------------------------------------- SaveWebPortal -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work!...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/07/28 12:00 a.m.•47 views

PHP-Nuke - 'INP modules.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown. http://www.example.com/path/modules.php?name=Downloads&op=search&query=alert'ARIA'...

4.3CVSS5.8AI score0.01704EPSS
SaveExploits2
securityvulns
securityvulns
•added 2006/06/21 12:00 a.m.•34 views

Module's Name Downloads <<--V 7 SQL injection

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:-...

1.6AI score
SaveExploits0
Rows per page
Query Builder