44 matches found
CVE-2007-6083
IceBB 1.0-rc6 contains a SQL injection in admin/index.php exploitable via the X-Forwarded-For HTTP header. Remote attackers can execute arbitrary SQL commands. The connected documents confirm the affected software and vulnerability class, but do not provide remediation steps or patched versions. ...
7.5CVSS8.4AI score0.01959EPSS
SaveExploits1References9Affected Software1
Sql injection
SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-6083...
7.5CVSS8.7AI score0.01223EPSS
SaveExploits4References4Affected Software1
20