105 matches found
CVE-2009-3063
creationtimestamp| type| source ---|---|--- 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9571...
CVE-2008-3063
The CVE-2008-3063 entry documents a SQL injection vulnerability in V-webmail 1.5.0’s login.php, exploitable via the username parameter to allow remote execution of arbitrary SQL commands. Affected software: V-webmail 1.5.0 (login.php). Root cause: unsafely concatenated user input in the login rou...
CVE-2007-3063
SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...
CVE-2006-3063
The CVE-2006-3063 entry describes multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and prior to 2.0.1 RC5. The flaw allows remote attackers to inject arbitrary script or HTML via user-supplied content in specific parameters across multiple pages: (a) ind...
CVE-2005-3063
CVE-2005-3063 affects MailGust (v1.9) and describes an SQL injection vulnerability on the password reminder page, exploitable via the email field to execute arbitrary SQL commands. This is evidenced by multiple sources in connected documents (NVD entry, OpenVAS/NASL plugin, and Nessus plugin) sta...