Lucene search
+L

109 matches found

NVD
NVD
added 2008/06/27 6:41 p.m.13 views

CVE-2008-2884

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

9.3CVSS7.5AI score0.03165EPSS
SaveExploits1References5
CVE
CVE
added 2008/06/27 6:0 p.m.32 views

CVE-2008-2884

The vulnerability CVE-2008-2884 affects the RSS-aggregator component, specifically display.php, where a PHP remote file inclusion is possible. An attacker can supply a URL in the path parameter to cause the application to include and execute remote PHP code on the server. Root cause: PHP remote f...

9.3CVSS7.6AI score0.03165EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2008/06/27 6:0 p.m.30 views

CVE-2008-2884

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

7.5AI score0.03165EPSS
SaveExploits1References5
CVE
CVE
added 2007/05/30 1:0 a.m.56 views

CVE-2007-2884

The CVE-2007-2884 issue affects Microsoft Visual Basic 6. It involves multiple stack-based buffer overflows triggered by a Visual Basic Project (vbp) file containing unusually long fields in Description or VersionCompanyName, enabling user-assisted remote attackers to cause CPU exhaustion (DoS) o...

9.3CVSS7.8AI score0.36218EPSS
SaveExploits3References8Affected Software1
Cvelist
Cvelist
added 2007/05/30 1:0 a.m.22 views

CVE-2007-2884

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service CPU consumption or execute arbitrary code via a Visual Basic Project vbp file with a long 1 Description or 2 Company Name VersionCompanyName field...

7.8AI score0.36218EPSS
SaveExploits3References8
NVD
NVD
added 2006/06/07 10:2 a.m.15 views

CVE-2006-2884

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.4AI score0.01291EPSS
SaveExploits2References7
CVE
CVE
added 2006/06/07 10:0 a.m.46 views

CVE-2006-2884

CVE-2006-2884 is a SQL injection vulnerability in Kmita FAQ 1.0, triggered via the catid parameter in index.php. The affected component is Kmita FAQ 1.0’s index.php handling of catid, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH (CVSS v2 base 7.5) w...

7.5CVSS8.4AI score0.01291EPSS
SaveExploits2References7Affected Software1
OpenVAS
OpenVAS
added 2006/03/26 12:0 a.m.27 views

Land Down Under <= 801 Multiple Vulnerabilities

Land Down Under is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.5AI score0.02411EPSS
SaveExploits16References5
CVE
CVE
added 2005/09/14 4:0 a.m.59 views

CVE-2005-2884

The connected sources show concrete details for CVE-2005-2884 related to Land Down Under (LDU) &lt;= 801. The vulnerability includes Cross-Site Scripting (XSS) in events.php and, per OpenVAS, multiple issues (including SQL injection) due to inadequate input sanitization in PHP scripts (events.php...

4.3CVSS5.7AI score0.01255EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder