Lucene search
+L

1236 matches found

myhack58
myhack58
added 2006/01/04 12:00 a.m.49 views

Night cat article system Version 2.1.0 cross site & injection vulnerability-vulnerability warning-the black bar safety net

Articles have been published in thehack the x-Files2 0 0 6 in the first period Cross-site vulnerability: night cat article system code amount is not very large, then we will from the most basic to start it, open the registration page to register. php see the following code if $POSTaction ==...

7.2AI score
SaveExploits0
NVD
NVD
added 2005/12/20 1:03 a.m.21 views

CVE-2005-4359

SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the 1 cat and 2 srcText parameters to faq.php...

6.4CVSS8.4AI score0.01153EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2005/12/20 1:00 a.m.29 views

CVE-2005-4359

SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the 1 cat and 2 srcText parameters to faq.php...

8.4AI score0.01153EPSS
SaveExploits0References4
CVE
CVE
added 2005/12/20 1:00 a.m.50 views

CVE-2005-4359

CVE-2005-4359 describes an SQL injection in ODFaq 2.1.0, exploitable via the (1) cat and (2) srcText parameters to faq.php, affecting includes/core.inc.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands, with partial confidentiality and partial integrity impacts...

6.4CVSS8.8AI score0.01153EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2005/08/16 4:00 a.m.46 views

CVE-2004-2333

CVE-2004-2333 affects Bodington 2.1.0 RC1 and earlier. The vulnerability is in the file upload area, where uploaded files can be read by remote attackers, impacting confidentiality (partial). The available documents do not specify the underlying root cause in code, affected components beyond the ...

5CVSS7.1AI score0.01388EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2005/08/16 4:00 a.m.28 views

CVE-2004-2333

Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files...

6.7AI score0.01388EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2004/08/18 12:00 a.m.21 views

Help Center Live < 2.1.0 osTicket Multiple SQL Injection

Binary data 3521.prm...

7.5CVSS7.3AI score0.01214EPSS
SaveExploits0References2
NVD
NVD
added 2004/04/15 4:00 a.m.31 views

CVE-2004-0152

Multiple stack-based buffer overflows in 1 the encodemime function, 2 the encodeuuencode function, 3 or the decodeuuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames...

7.5CVSS7.7AI score0.04146EPSS
SaveExploits0References3
CVE
CVE
added 2004/03/27 5:00 a.m.71 views

CVE-2004-0153

Summary (CVE-2004-0153): Multiple format string vulnerabilities affect Emil up to version 2.1.0 and earlier. The flaws reside in error-message handling and can allow an attacker to execute arbitrary code on a vulnerable host when processing crafted messages. Public documentation across sources (N...

7.5CVSS7.4AI score0.03728EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2003/04/02 5:00 a.m.76 views

CVE-2002-0897

CVE-2002-0897 affects LocalWeb2000 web server (version 2.1.0 and earlier). The vulnerability allows remote attackers to bypass access restrictions and view restricted files by using a URL containing the "/./" directory. Connected sources also reference multiple remote vulnerabilities for LocalWeb...

7.5CVSS6.7AI score0.02812EPSS
SaveExploits2References4Affected Software1
Exploit DB
Exploit DB
added 2002/05/24 12:00 a.m.30 views

LocalWEB2000 2.1.0 Standard - File Disclosure

source: https://www.securityfocus.com/bid/4820/info A vulnerability exists in LocalWEB2000 related to content password protection. It is possible to have LocalWEB2000 treat files as unprotected by requesting them as files within the '.' current directory. If the file http://server/file.txt is set...

7.5CVSS5.8AI score0.02812EPSS
SaveExploits2
CVE
CVE
added 2002/03/09 5:00 a.m.63 views

CVE-2001-0764

The CVE-2001-0764 entry describes a buffer overflow in ntping of scotty 2.1.0 that allows local users to execute arbitrary code via a long hostname passed as a command line argument. Concretely, the affected software is scotty 2.1.0 (ntping component); the vulnerability arises from a buffer overf...

7.2CVSS7.5AI score0.01444EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
added 2002/03/09 5:00 a.m.36 views

CVE-2001-0764

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument...

7.5AI score0.01444EPSS
SaveExploits2References6
NVD
NVD
added 2001/10/18 4:00 a.m.16 views

CVE-2001-0764

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument...

7.2CVSS7.5AI score0.01444EPSS
SaveExploits2References6
OSV
OSV
added 1996/07/16 4:00 a.m.9 views

CVE-1999-1572

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

6.6AI score
SaveExploits0References14
OSV
OSV
added 1996/07/16 4:00 a.m.7 views

DEBIAN-CVE-1999-1572

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

2.1CVSS6.6AI score0.00551EPSS
SaveExploits1References1
Rows per page
Query Builder