Lucene search
+L

372 matches found

Prion
Prion
added 2008/02/19 8:44 p.m.14 views

Directory traversal

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

3.6CVSS7AI score0.02119EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2008/02/19 8:44 p.m.19 views

CVE-2008-0822

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

3.6CVSS6.5AI score0.02119EPSS
SaveExploits2References4
CVE
CVE
added 2008/02/19 8:00 p.m.41 views

CVE-2008-0822

CVE-2008-0822 affects Scribe 0.2: a directory traversal in index.php via the page parameter (".."), enabling read of arbitrary local files. Root cause is insufficient input validation. Impact is local confidentiality exposure (PARTIAL). CVSS v2 base score 3.6 (LOW) with LOCAL access and no authen...

3.6CVSS6.5AI score0.02119EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2008/02/19 8:00 p.m.30 views

CVE-2008-0822

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...

6.5AI score0.02119EPSS
SaveExploits2References4
securityvulns
securityvulns
added 2008/02/15 12:00 a.m.47 views

scribe 0.2 local file inclusion vulnerability

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd00...

1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/02/15 12:00 a.m.14 views

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 sebug.net...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/02/15 12:00 a.m.25 views

scribe02-lfi.txt

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2008/02/14 12:00 a.m.15 views

Scribe 0.2 - index.php Local File Inclusion

Scribe 0.2 - index.php Local File Inclusion scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

7.4AI score
SaveExploits0
zdt
zdt
added 2008/02/14 12:00 a.m.23 views

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Scribe = 0.2 index.php page Local File Inclusion Vulnerability ================================================================= scribe 0.2 local file inclusion vulnerabilit...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/02/14 12:00 a.m.40 views

Scribe 0.2 - 'index.php' Local File Inclusion

scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

3.6CVSS5.8AI score0.02119EPSS
SaveExploits2
NVD
NVD
added 2008/02/12 2:00 a.m.20 views

CVE-2008-0721

SQL injection vulnerability in index.php in the Sermon comsermon 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter...

7.5CVSS8.4AI score0.00928EPSS
SaveExploits1References2
Prion
Prion
added 2008/01/31 8:00 p.m.24 views

Sql injection

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.02742EPSS
SaveExploits2References5Affected Software1
CVE
CVE
added 2008/01/31 7:30 p.m.252 views

CVE-2008-0507

Summary: CVE-2008-0507 is an SQL injection in the WordPress AdServe plugin (version 0.2) specifically in the adclick.php script, where user-supplied the parameter id is unsafely used in a database query. The vulnerability allows remote attackers to execute arbitrary SQL commands via id, potential...

7.5CVSS8.5AI score0.02742EPSS
SaveExploits2References5Affected Software1
NVD
NVD
added 2007/11/14 1:46 a.m.22 views

CVE-2007-5951

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00991EPSS
SaveExploits1References5
Prion
Prion
added 2007/11/14 1:46 a.m.23 views

Sql injection

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00991EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2007/11/14 1:00 a.m.29 views

CVE-2007-5951

SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00991EPSS
SaveExploits1References5
CVE
CVE
added 2007/11/14 1:00 a.m.64 views

CVE-2007-5951

CVE-2007-5951 describes an SQL injection vulnerability in the PHP script articles.php of the E-Vendejo 0.2 application, exploitable via the id parameter. The issue affects the script used to retrieve articles and allows remote attackers to execute arbitrary SQL commands. The CVSS v2 metrics repor...

7.5CVSS8.4AI score0.00991EPSS
SaveExploits1References5Affected Software1
exploitpack
exploitpack
added 2007/11/05 12:00 a.m.18 views

E-Vendejo 0.2 - Articles.php SQL Injection

E-Vendejo 0.2 - Articles.php SQL Injection source: https://www.securityfocus.com/bid/26330/info E-Vendejo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

8.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/11/05 12:00 a.m.25 views

Galmeta Post 0.2 - 'Upload_Config.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/26329/info Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are al...

7.5CVSS5.8AI score0.02276EPSS
SaveExploits1
Exploit DB
Exploit DB
added 2007/11/02 12:00 a.m.31 views

Scribe 0.2 - PHP Remote Code Execution

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Scribe...

7.5CVSS5.8AI score0.03311EPSS
SaveExploits2
Rows per page
Query Builder