Lucene search
+L

1397 matches found

CVE
CVE
added 2010/01/28 8:0 p.m.46 views

CVE-2010-0454

The CVE-2010-0454 entry describes a SQL injection in Publique! 2.3, exploitable via the sid parameter in cgi/cgilua.exe/sys/start.htm. Affected component is Publique! 2.3 (cgi/cgilua.exe/sys/start.htm). The underlying issue is improper handling of user-supplied sid leading to arbitrary SQL execut...

7.5CVSS8.7AI score0.01148EPSS
SaveExploits1References4Affected Software1
Packet Storm
Packet Storm
added 2010/01/14 12:0 a.m.25 views

Populum 2.3 SQL Injection

::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce communities VuLneraBiLity : SQL injection DoRk : "Powered by Populum" My HoMe : www.andhrahackers.com gReetZ : Mr.XXXX...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2010/01/13 12:0 a.m.20 views

Populum 2.3 - SQL Injection

Populum 2.3 - SQL Injection Exploit Title: Populum SQL injection vulnerability Author: -SiLeNtp0is0n- Version: 2.3 ::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/01/13 12:0 a.m.32 views

Populum 2.3 - SQL Injection

Exploit Title: Populum SQL injection vulnerability Author: -SiLeNtp0is0n- Version: 2.3 ::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce communities VuLneraBiLity : SQL...

5.8AI score
SaveExploits0
NVD
NVD
added 2010/01/06 10:0 p.m.11 views

CVE-2009-4580

Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...

4.3CVSS5.8AI score0.01131EPSS
SaveExploits1References5
Prion
Prion
added 2010/01/06 10:0 p.m.12 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...

4.3CVSS6.1AI score0.01131EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2010/01/06 9:33 p.m.23 views

CVE-2009-4580

Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...

5.8AI score0.01131EPSS
SaveExploits1References5
CVE
CVE
added 2010/01/06 9:33 p.m.41 views

CVE-2009-4580

CVE-2009-4580 involves multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 . The flaws allow remote attackers to inject arbitrary web script or HTML via the id parameter to the pages yorumyaz.php and blog.php . The provided documents describe the affected components and the vuln...

4.3CVSS5.9AI score0.01131EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2010/01/04 5:30 p.m.17 views

CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

6.8CVSS7.4AI score0.01913EPSS
SaveExploits1References4
CVE
CVE
added 2010/01/04 5:0 p.m.41 views

CVE-2009-4544

The CVE-2009-4544 issue affects Cromosoft Technologies Facil Helpdesk 2.3 Lite’s kbase/kbase.php, where a Cross-site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The NVD records a MEDIUM severity (CVSS v2 base score 4.3) with network access an...

4.3CVSS5.9AI score0.01553EPSS
SaveExploits2References3Affected Software1
Exploit DB
Exploit DB
added 2010/01/01 12:0 a.m.33 views

Mini-NUKE 2.3 Freehost - Multiple Vulnerabilities

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/12/30 12:0 a.m.32 views

Gallery 2.3 Remote File Inclusion

======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | |...

0.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/12/29 12:0 a.m.22 views

Hasta Blog 2.3 Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || Script Name : Hasta Blog Bug Type : XSS vulnerability » Founder: LionTurk - [email protected] Note:Forever...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2009/12/26 12:0 a.m.26 views

Gallery v2.3 RFI Vulnerability

No description provided by source. ======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/12/26 12:0 a.m.26 views

Gallery 2.3 - Remote File Inclusion

Gallery 2.3 - Remote File Inclusion ======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -0021377181886...

0.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/12/26 12:0 a.m.49 views

Gallery 2.3 - Remote File Inclusion

======================================================================================== | Title : Gallery V 2.3 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | |...

5.8AI score
SaveExploits0
Prion
Prion
added 2009/12/07 5:30 p.m.22 views

Cross site scripting

Cross-site scripting XSS vulnerability in the striptags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attackers to inject arbitrary web script or HTML via vectors involving non-printing ASCII characters, related to HTML::Tokenizer and...

4.3CVSS5.7AI score0.03022EPSS
SaveExploits0References15Affected Software2
NVD
NVD
added 2009/10/02 7:30 p.m.19 views

CVE-2009-3532

Multiple SQL injection vulnerabilities in login.asp aka the login screen in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the 1 uname and 2 pword parameters. NOTE: some of these details are obtained from third party information...

7.5CVSS8.5AI score0.01851EPSS
SaveExploits1References5
NVD
NVD
added 2009/09/29 3:30 p.m.17 views

CVE-2009-3449

MP3 Collector 2.3 allows remote attackers to cause a denial of service application crash via a long URL in a .m3u playlist file...

4.3CVSS6.5AI score0.0188EPSS
SaveExploits1References1
Prion
Prion
added 2009/09/29 3:30 p.m.17 views

Design/Logic Flaw

MP3 Collector 2.3 allows remote attackers to cause a denial of service application crash via a long URL in a .m3u playlist file...

4.3CVSS7.1AI score0.0188EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder