Lucene search
+L

9 matches found

NVD
NVD
•added 2009/12/30 8:00 p.m.•28 views

CVE-2009-4464

Cross-site scripting XSS vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

4.3CVSS5.7AI score0.01498EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2009/12/30 7:00 p.m.•42 views

CVE-2009-4464

Cross-site scripting XSS vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

5.7AI score0.01498EPSS
SaveExploits2References4
CVE
CVE
•added 2009/12/30 7:00 p.m.•68 views

CVE-2009-4464

CVE-2009-4464 : Cross-site scripting (XSS) in Active Business Directory 2, via searchadvance.asp, allows remote attackers to inject arbitrary web script/HTML through the search parameter. The vulnerability arises from insufficient sanitization of user input, enabling stored/reflective-like effect...

4.3CVSS5.7AI score0.01498EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/30 12:00 a.m.•9 views

CVE-2009-4464: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

4.3CVSS6AI score0.01498EPSS
SaveExploits2References2
Prion
Prion
•added 2009/01/27 1:30 a.m.•26 views

Sql injection

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS9.1AI score0.00973EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2009/01/27 1:00 a.m.•63 views

CVE-2008-5972

CVE-2008-5972 describes an SQL injection in default.asp of Active Business Directory 2, exploitable via the catid parameter to execute arbitrary SQL commands. The cited sources confirm remote exploitation with impacts including potential data access/modification; no explicit remediation is provid...

7.5CVSS6.6AI score0.00973EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/01/27 1:00 a.m.•38 views

CVE-2008-5972

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.4AI score0.00973EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/27 12:00 a.m.•7 views

CVE-2008-5972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/11/30 12:00 a.m.•18 views

Active Business Directory 2 - Blind SQL Injection

Active Business Directory 2 - Blind SQL Injection -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active Business Directory v 2 €xploit :...

0.3AI score
SaveExploits0
Rows per page
Query Builder