Lucene search
+L

108 matches found

CVE
CVE
•added 2009/08/11 10:00 a.m.•73 views

CVE-2009-2735

The CVE-2009-2735 entry describes an SQL injection in sun-jester OpenNews 1.0, via admin.php when magic_quotes_gpc is disabled. The vulnerability affects the username parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented in NVD and mirrored in multiple referen...

6.8CVSS8.7AI score0.0098EPSS
SaveExploits1References5Affected Software1
Circl
Circl
•added 2009/08/05 12:00 a.m.•19 views

CVE-2009-2735

creationtimestamp| type| source ---|---|--- 2009-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9371...

6.8CVSS5.8AI score0.0098EPSS
SaveExploits1References1
CVE
CVE
•added 2007/10/09 10:00 a.m.•73 views

CVE-2004-2735

CVE-2004-2735 describes a Cross-site scripting (XSS) vulnerability affecting P4DB 2.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted input through a long list of parameters across multiple CGI scripts (e.g., SetPreferences.cgi, branchVi...

4.3CVSS6AI score0.01263EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2007/05/17 7:00 p.m.•50 views

CVE-2007-2735

CVE-2007-2735 is an SQL injection vulnerability affecting the ResManager 1.2.1 and earlier module for XOOPS. The issue allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter in edit_day.php. CVSSv2 base score 7.5 (HIGH) with network attack vector, no authentication,...

7.5CVSS8.4AI score0.01195EPSS
SaveExploits2References6Affected Software1
CVE
CVE
•added 2006/06/01 10:00 a.m.•78 views

CVE-2006-2735

CVE-2006-2735 is a PHP remote file inclusion vulnerability in Activity MOD Plus (Amod) 1.1.0 (language/lang_english/lang_activity.php) used with phpBB when register_globals is on. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The en...

5.1CVSS7.4AI score0.07015EPSS
SaveExploits2References12Affected Software1
CVE
CVE
•added 2005/08/29 4:00 a.m.•63 views

CVE-2005-2735

CVE-2005-2735 describes a cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier . The flaw allows remote attackers to inject arbitrary web script or HTML via EXIF data (e.g., Camera Model Tag) . Documented impact indicates that the vulnerability can be triggered through crafted...

4.3CVSS5.7AI score0.0197EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2005/03/22 12:00 a.m.•19 views

UserMin Remote Access Detection

Binary data 2735.prm...

7.3AI score
SaveExploits0
NVD
NVD
•added 2004/12/31 5:00 a.m.•24 views

CVE-2004-2735

Cross-site scripting XSS vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 SETPREFERENCES parameter in SetPreferences.cgi; 2 BRANCH parameter in branchView.cgi; 3 FSPC and 4 COMPLETE parameters in changeByUsers.cgi; 5 FSPC, 6 LABEL, 7...

4.3CVSS5.7AI score0.01263EPSS
SaveExploits0References7
Rows per page
Query Builder