Lucene search
+L

271 matches found

NVD
NVD
•added 2004/12/31 5:00 a.m.•25 views

CVE-2004-2349

Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries...

7.5CVSS8.3AI score0.01211EPSS
SaveExploits0References4
NVD
NVD
•added 2004/11/23 5:00 a.m.•24 views

CVE-2004-0338

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter...

10CVSS8.2AI score0.02358EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2004/11/19 12:00 a.m.•21 views

miniBB index.php user Parameter SQL Injection

The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a SQL injection attack. Input to the 'user' parameter of index.php not properly sanitized. A remote attacker could exploit this to execute arbitrary SQL queries against the...

7.5CVSS6AI score0.0265EPSS
SaveExploits2References1
NVD
NVD
•added 2003/10/20 4:00 a.m.•19 views

CVE-2003-0751

SQL injection vulnerability in passdone.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter...

7.5CVSS8.2AI score0.01234EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2003/09/04 4:00 a.m.•53 views

CVE-2003-0735

SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter...

8.2AI score0.01673EPSS
SaveExploits1References3
NVD
NVD
•added 2002/12/31 5:00 a.m.•25 views

CVE-2002-2168

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...

7.5CVSS8.2AI score0.01211EPSS
SaveExploits0References4
CVE
CVE
•added 2002/10/03 4:00 a.m.•61 views

CVE-2002-0709

The CVE-2002-0709 issue affects SurfControl SuperScout WebFilter’s Web Reports Server. The problem arises from SQL injection in the report components (notably SimpleBar.dll/RunReport and related DLLs) where input is not properly validated, allowing remote attackers toExecute arbitrary SQL against...

7.5CVSS8.4AI score0.01136EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
•added 2002/10/03 4:00 a.m.•36 views

CVE-2002-0709

SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs...

8.4AI score0.01136EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2001/05/07 4:00 a.m.•26 views

CVE-2001-0319

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the orderrn option of the report capability...

7.6AI score0.07099EPSS
SaveExploits2References4
Exploit DB
Exploit DB
•added 2001/04/13 12:00 a.m.•44 views

NCM Content Management System - content.pl Input Validation

source: https://www.securityfocus.com/bid/2584/info The NCM Content Management System is a product distributed by NCM. The NCM Content Management System is designed to manage web material and other data, and provide an interface to databases from web resources. A problem with the Content Manageme...

5CVSS5.8AI score0.02773EPSS
SaveExploits2
NVD
NVD
•added 2001/03/26 5:00 a.m.•15 views

CVE-2001-0201

The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...

7.5CVSS7.9AI score0.01752EPSS
SaveExploits1References3
Rows per page
Query Builder