Lucene search
+L

126 matches found

CVE
CVE
added 2008/06/06 6:00 p.m.62 views

CVE-2008-2568

CVE-2008-2568 is a SQL injection vulnerability in Joomla!’s Simple Shop Galore (com_simpleshop) component, affecting version 3.4 and earlier. The flaw allows remote attackers to inject and execute arbitrary SQL commands via the catid parameter in a browse action to index.php. Public references in...

7.5CVSS8.2AI score0.01051EPSS
SaveExploits2References5Affected Software2
Circl
Circl
added 2008/06/05 12:00 a.m.12 views

CVE-2008-2568

creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5743 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5833...

7.5CVSS5.8AI score0.01051EPSS
SaveExploits2References2
CVE
CVE
added 2007/05/16 10:00 p.m.52 views

CVE-2007-2568

VCDGear 3.55 contains multiple stack-based buffer overflows in the CUE file parser, exploitable via a long (1) tag or (2) track type in a CUE file. This enables user‑assisted remote code execution. The provided documents do not include a remediation or patched version.

9.3CVSS7.8AI score0.0622EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2006/05/24 11:02 p.m.33 views

CVE-2006-2568

PHP remote file inclusion vulnerability in addpostnewpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 trial allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter...

5.1CVSS7.6AI score0.07873EPSS
SaveExploits2References7
CVE
CVE
added 2005/11/22 2:00 a.m.66 views

CVE-2004-2568

CVE-2004-2568 concerns multiple cross-site scripting (XSS) flaws in ReciPants 1.1.1. The issue arises from insufficient input sanitization in fields such as user id, recipe id, category id and other ID numbers, enabling remote script/HTML injection. The connected Red Hat and CVE records confirm t...

4.3CVSS6AI score0.01177EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2005/08/16 4:00 a.m.84 views

CVE-2005-2568

CVE-2005-2568 describes an eval-injection vulnerability in SysCP's template engine affecting SysCP 1.2.10 and earlier. An attacker can supply a string containing code inside { and } that is processed by PHP eval, enabling remote execution of arbitrary PHP. The NVD CVSS data rates impact as PARTIA...

7.5CVSS7.8AI score0.01572EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder