Lucene search
+L

71 matches found

CVE
CVE
added 2013/01/24 1:00 a.m.50 views

CVE-2012-6520

CVE-2012-6520 affects Wikidforum 2.10. Multiple SQL injection flaws in the advanced search allow remote attackers to execute arbitrary SQL via the select_sort and opt_search_select parameters. CVSSv2 base 7.5 (HIGH) with network attack vector and no authentication. Note: exploitation status is no...

7.5CVSS8.7AI score0.01271EPSS
SaveExploits2References7Affected Software1
Cvelist
Cvelist
added 2013/01/24 1:00 a.m.30 views

CVE-2012-6520

Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...

8.4AI score0.01271EPSS
SaveExploits2References7
Circl
Circl
added 2012/03/12 12:00 a.m.9 views

CVE-2012-6520

creationtimestamp| type| source ---|---|--- 2012-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36946...

7.5CVSS5.8AI score0.01271EPSS
SaveExploits2References1
CVE
CVE
added 2009/03/25 6:00 p.m.47 views

CVE-2008-6520

Xitami Web Server vulnerability CVE-2008-6520 affects the SSI filter in Xitami (notably version 2.5c2; other versions possibly affected). The issue consists of multiple format-string vulnerabilities that can be triggered by a URI ending in .ssi, .shtm, or .shtml, leading to denial of service (dae...

10CVSS8.1AI score0.04853EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2009/01/23 12:00 a.m.33 views

SuSE Update for opera SUSE-SA:2008:001

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

10CVSS6.4AI score0.05018EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.26 views

FreeBSD Ports: opera, opera-devel, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS6.6AI score0.05018EPSS
SaveExploits1References3
Prion
Prion
added 2008/03/10 5:44 p.m.11 views

Design/Logic Flaw

The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service web interface crash via an HTTP request to basehelpEnglish.htm with a large integer in the Content-Length field...

7.8CVSS7.1AI score0.01763EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2008/03/10 5:00 p.m.29 views

CVE-2008-1267

The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service web interface crash via an HTTP request to basehelpEnglish.htm with a large integer in the Content-Length field...

6.6AI score0.01763EPSS
SaveExploits1References5
CVE
CVE
added 2008/03/10 5:00 p.m.36 views

CVE-2008-1267

The CVE-2008-1267 issue affects the Siemens SpeedStream 6520 router. A remote attacker can crash the web interface by sending an HTTP request to basehelp_English.htm containing an excessively large Content-Length, resulting in a denial of service. The underlying root cause = malformed handling of...

7.8CVSS6.6AI score0.01763EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2007/12/24 8:00 p.m.74 views

CVE-2007-6520

Opera before 9.25 contains multiple vulnerabilities (CVE-2007-6520, CVE-2007-6521, CVE-2007-6522, CVE-2007-6524) that enable cross-domain scripting via plug-ins, TLS certificate handling that could allow arbitrary code execution, and memory disclosure through BMP/file handling. The issues affect ...

4.3CVSS5.9AI score0.01597EPSS
SaveExploits1References12Affected Software1
CVE
CVE
added 2006/12/14 1:00 a.m.48 views

CVE-2006-6520

The CVE-2006-6520 entry describes multiple XSS vulnerabilities in Messageriescripthp 2.0, allowing remote attackers to inject arbitrary script/HTML via parameters: pseudo to existepseudo.php, email to existeemail.php, and pageName or cssform to Contact/contact.php. NVD reports a CVSS v2 base scor...

6.8CVSS6AI score0.02126EPSS
SaveExploits4References6Affected Software1
Rows per page
Query Builder