Lucene search
+L

1996 matches found

exploitpack
exploitpack
•added 2008/06/13 12:00 a.m.•26 views

Pre ADS Portal 2.0 - SQL Injection

Pre ADS Portal 2.0 - SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV98$2008 ----------------------------------------------------------------------------------------- ECHOADV98$2008 Pre Ads Portal = 2.0 Sql Injection Vulnerability...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/06/13 12:00 a.m.•37 views

adv98-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV98$2008 ----------------------------------------------------------------------------------------- ECHOADV98$2008 Pre Ads Portal = 2.0 Sql Injection Vulnerability...

7.4AI score
SaveExploits0
zdt
zdt
•added 2008/06/13 12:00 a.m.•30 views

Pre Ads Portal <= 2.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Ads Portal = 2.0 Remote SQL Injection Vulnerability ======================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / /...

7.1AI score
SaveExploits0
NVD
NVD
•added 2008/04/16 5:05 p.m.•26 views

CVE-2008-1838

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

7.5CVSS8.2AI score0.00973EPSS
SaveExploits2References4
CVE
CVE
•added 2008/04/16 5:00 p.m.•51 views

CVE-2008-1838

The connected data shows a related CVE (CVE-2008-6526) describing a SQL injection in BosDev BosClassifieds: index.php via the cat_id parameter, a vector different from CVE-2008-1838’s cat parameter. This confirms that BosClassifieds 3.0 stores user-supplied input in a way exploitable through SQL,...

7.5CVSS8.2AI score0.00973EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2008/04/15 5:05 p.m.•14 views

CVE-2008-1793

Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...

4.3CVSS5.7AI score0.01022EPSS
SaveExploits0References3
Prion
Prion
•added 2008/04/15 5:05 p.m.•13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References3
CVE
CVE
•added 2008/04/15 5:00 p.m.•46 views

CVE-2008-1793

CVE-2008-1793 involves multiple cross-site scripting (XSS) vulnerabilities in the view.cgi module of Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold. The weaknesses allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department para...

4.3CVSS5.7AI score0.01022EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
•added 2008/04/15 5:00 p.m.•27 views

CVE-2008-1793

Multiple cross-site scripting XSS vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the 1 AdNum and 2 Department parameters. NOTE: the provenance of this information is...

5.7AI score0.01022EPSS
SaveExploits0References3
exploitpack
exploitpack
•added 2008/04/14 12:00 a.m.•28 views

BosClassifieds 3.0 - index.php SQL Injection

BosClassifieds 3.0 - index.php SQL Injection !R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, No...

0.9AI score
SaveExploits0
Prion
Prion
•added 2008/03/10 5:44 p.m.•16 views

Cross site scripting

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2008/03/10 5:00 p.m.•48 views

CVE-2008-1224

CVE-2008-1224 is an XSS vulnerability affecting the BosClassifieds Classified Ads System 3.0, specifically in the account.php script where user-supplied input in the returnTo parameter can be used to inject arbitrary web script or HTML. The issue is described as a cross-site scripting flaw that c...

4.3CVSS5.5AI score0.01022EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2008/03/10 5:00 p.m.•30 views

CVE-2008-1224

Cross-site scripting XSS vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

5.5AI score0.01022EPSS
SaveExploits0References3
Prion
Prion
•added 2007/07/30 5:30 p.m.•23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

4.3CVSS6.1AI score0.01709EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2007/07/30 5:30 p.m.•26 views

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

4.3CVSS5.8AI score0.01709EPSS
SaveExploits1References5
CVE
CVE
•added 2007/07/30 5:00 p.m.•62 views

CVE-2007-4078

CVE-2007-4078 concerns multiple XSS vulnerabilities in AlstraSoft Text Ads Enterprise. The affected components are web pages handling user input: forgot_uid.php (r parameter), search_results.php (query or sk parameters), and website_page.php (pageId parameter). The root cause is improper input va...

4.3CVSS5.8AI score0.01709EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2007/07/30 5:00 p.m.•34 views

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

5.8AI score0.01709EPSS
SaveExploits1References5
Packet Storm
Packet Storm
•added 2007/07/23 12:00 a.m.•40 views

alstrasoft-multi.txt

AlstraSoft Multiple products multiple Vulnerabilities Vendor urL:http://www.alstrasoft.com/products.htm Advisore url:http://lostmon.blogspot.com/2007/07/ alstrasoft-multiple-products-multiple.html Vendor notify:yes webform Exploit included: yes Multiple products of Alstrasoft Are prone vulnerable...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/07/05 8:30 p.m.•19 views

Sql injection

SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...

7.5CVSS9.1AI score0.01202EPSS
SaveExploits2References6Affected Software1
NVD
NVD
•added 2007/07/05 8:30 p.m.•17 views

CVE-2007-3583

SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...

7.5CVSS8.4AI score0.01202EPSS
SaveExploits2References6
Rows per page
Query Builder