85 matches found
CVE-2008-3364
creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6152...
CVE-2007-3364
CVE-2007-3364 is a reported cross-site scripting (XSS) vulnerability in the MyServer 0.8.9 distribution. The flaw exists in the CGI page cgi-bin/post.mscgi, where an attacker can inject arbitrary web script or HTML through the body content. The available documents identify the affected component ...
CVE-2006-3364
The CVE-2006-3364 entry describes an SQL injection in BLOG:CMS NP_SEO plugin (affected prior to version 4.1.0) where the id parameter in index.php can be exploited to execute arbitrary SQL commands. The vulnerability, originating from improper input handling in the plugin, allows remote attackers...
CVE-2005-3364
CVE-2005-3364 concerns multiple SQL injection vulnerabilities in DboardGear. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.ph...
MS:0C2DD6D2-3364-4926-8246-757DE29F1DB6
...