Lucene search
+L

682 matches found

Exploit DB
Exploit DB
added 2005/10/31 12:0 a.m.18 views

Invision Gallery 2.0.3 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15240/info Invision Gallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2005/08/05 4:0 a.m.21 views

CVE-2005-2478

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...

8.3AI score0.0153EPSS
Exploits1References7
NVD
NVD
added 2005/08/05 4:0 a.m.13 views

CVE-2005-2478

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...

7.5CVSS8.3AI score0.0153EPSS
Exploits1References7
CVE
CVE
added 2005/08/05 4:0 a.m.48 views

CVE-2005-2478

SilverNews is affected by CVE-2005-2478 due to multiple issues. The primary flaw is an SQL Injection in the admin login: user input in the username parameter of admin.php is not sanitized before use in queries, allowing remote attackers to execute arbitrary SQL commands. Additionally, in combinat...

7.5CVSS8.4AI score0.0153EPSS
Exploits1References7Affected Software1
Packet Storm
Packet Storm
added 2005/08/05 12:0 a.m.34 views

silvernews203.txt

Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2005/08/04 12:0 a.m.59 views

Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting

Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...

0.7AI score
Exploits0
securityvulns
securityvulns
added 2005/07/12 12:0 a.m.47 views

[SA16038] SMS "mpl.sh" Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

0.3AI score
Exploits0
CVE
CVE
added 2005/06/28 4:0 a.m.54 views

CVE-2002-1894

CVE-2002-1894 describes a Cross-site scripting (XSS) vulnerability in phpBB 2.0.3, where the highlight parameter in viewtopic.php can be exploited to inject arbitrary script/HTML. Affected component: phpBB 2.0.3, file viewtopic.php. Root cause: insufficient input handling allowing script/HTML inj...

4.3CVSS6AI score0.0196EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2005/05/16 4:0 a.m.66 views

CVE-2005-1598

CVE-2005-1598 corresponds to a SQL Injection in Invision Power Board (IPB) <= 2.0.3. The vulnerability allows remote attackers to execute arbitrary SQL via a crafted pass_hash cookie that alters the internal $pid variable. Impact is partial confidentiality and integrity; variants include addit...

7.5CVSS8.4AI score0.1391EPSS
Exploits3References12Affected Software2
RedHat Linux
RedHat Linux
added 2005/05/04 3:5 p.m.4 views

security flaw

Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...

5CVSS5.9AI score0.0166EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2005/05/02 4:0 a.m.27 views

CVE-2005-0806

Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...

5CVSS6AI score0.0166EPSS
Exploits0References2
NVD
NVD
added 2005/05/02 4:0 a.m.25 views

CVE-2005-0806

Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...

5CVSS9.2AI score0.0166EPSS
Exploits0References5
OSV
OSV
added 2005/05/02 4:0 a.m.2 views

DEBIAN-CVE-2005-0806

Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...

5CVSS7AI score0.0166EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2005/03/20 5:0 a.m.34 views

CVE-2005-0806

Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...

5CVSS6.2AI score0.0166EPSS
Exploits0
exploitpack
exploitpack
added 2005/02/21 12:0 a.m.17 views

Invision Power Board (IP.Board) 1.x2.0.3 - SML Code Script Injection

Invision Power Board IP.Board 1.x2.0.3 - SML Code Script Injection source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script...

7.9AI score
Exploits0
Exploit DB
Exploit DB
added 2005/02/21 12:0 a.m.16 views

Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection

source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script content. Since this could permit an attacker to inject hostile...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.19 views

WS_FTP < 2.0.3 Multiple Command Long Argument Overflows

Binary data 1812.prm...

7.5CVSS7.3AI score0.42141EPSS
Exploits1References1
exploitpack
exploitpack
added 2004/01/20 12:0 a.m.16 views

PHPix 2.0.3 - Arbitrary Command Execution

PHPix 2.0.3 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/9458/info It has been reported that PHPix is vulnerable to a remote command execution vulnerability due to poor handling of externally supplied data such as shell metacharacters. This issue may allow unauthorized...

0.5AI score
Exploits0
NVD
NVD
added 2003/12/31 5:0 a.m.17 views

CVE-2003-1530

SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark parameter...

7.5CVSS8.4AI score0.01059EPSS
Exploits1References5
0day.today
0day.today
added 2003/09/27 12:0 a.m.20 views

GNU Cfengine 2.-2.0.3 Remote Stack Overflow Exploit

Exploit for bsd platform in category remote exploits =================================================== GNU Cfengine 2.-2.0.3 Remote Stack Overflow Exploit =================================================== !/usr/bin/perl -s kokaninATdtors.net / cfengine2-2.0.3 from freebsd ports 26/sep/2003...

7.1AI score
Exploits0
Rows per page
Query Builder