Lucene search
+L

13258 matches found

CVE
CVE
added 2010/07/01 9:0 p.m.59 views

CVE-2010-2616

CVE-2010-2616 : PHP Bible Search (bible.php) is vulnerable to SQL injection via the chapter parameter, affecting the PHP Bible Search project (around version 0.99). The OpenVAS entry explicitly notes SQL injection (and also mentions cross-site scripting in its description). The root cause is unsa...

7.5CVSS8.8AI score0.00967EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2010/06/30 6:30 p.m.14 views

CVE-2010-1521

SQL injection vulnerability in include/classes/tznuser.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php...

7.5CVSS8.4AI score0.01258EPSS
SaveExploits0References6
Prion
Prion
added 2010/06/30 6:30 p.m.17 views

Sql injection

SQL injection vulnerability in include/classes/tznuser.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php...

7.5CVSS9.2AI score0.01258EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2010/06/29 6:30 p.m.17 views

CVE-2010-2516

Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing MLM Software allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 index.php and 2 admin/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from...

7.5CVSS8.2AI score0.01013EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2010/06/29 6:0 p.m.26 views

CVE-2010-2516

Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing MLM Software allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 index.php and 2 admin/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from...

8.2AI score0.01013EPSS
SaveExploits0References1
NVD
NVD
added 2010/06/28 8:30 p.m.18 views

CVE-2010-2511

SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing MLM Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter...

7.5CVSS8.4AI score0.00961EPSS
SaveExploits2References3
NVD
NVD
added 2010/06/28 8:30 p.m.17 views

CVE-2010-2512

SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00971EPSS
SaveExploits2References4
Prion
Prion
added 2010/06/28 8:30 p.m.21 views

Sql injection

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

7.5CVSS9.1AI score0.00907EPSS
SaveExploits2References2
Prion
Prion
added 2010/06/28 8:30 p.m.19 views

Sql injection

SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00971EPSS
SaveExploits2References4
Prion
Prion
added 2010/06/28 8:30 p.m.18 views

Sql injection

SQL injection vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

7.5CVSS9AI score0.00975EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2010/06/28 8:0 p.m.60 views

CVE-2010-2512

The CVE-2010-2512 issue is supported by multiple connected records indicating a SQL injection in the 2daybiz Matrimonial Script, specifically in the file/product area: customprofile.php . The vulnerability is exploitable via the id parameter , allowing remote attackers to execute arbitrary SQL co...

7.5CVSS8.7AI score0.00971EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2010/06/28 8:0 p.m.25 views

CVE-2010-2512

SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00971EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2010/06/28 8:0 p.m.26 views

CVE-2010-2515

Multiple SQL injection vulnerabilities in index.php in the JFaq comjfaq component 1.2 for Joomla!, when magicquotesgpc is disabled, allow 1 remote attackers to execute arbitrary SQL commands via the id parameter, and 2 remote authenticated users with "Public Front-end" permissions to execute...

8.2AI score0.0169EPSS
SaveExploits1References4
NVD
NVD
added 2010/06/25 9:30 p.m.21 views

CVE-2010-2461

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4
NVD
NVD
added 2010/06/25 9:30 p.m.23 views

CVE-2010-2462

SQL injection vulnerability in withdrawmoney.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4
Prion
Prion
added 2010/06/25 9:30 p.m.12 views

Sql injection

SQL injection vulnerability in withdrawmoney.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4
Prion
Prion
added 2010/06/25 9:30 p.m.15 views

Sql injection

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4Affected Software1
Prion
Prion
added 2010/06/25 9:30 p.m.14 views

Sql injection

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

7.5CVSS9.1AI score0.00997EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2010/06/25 9:0 p.m.28 views

CVE-2010-2462

SQL injection vulnerability in withdrawmoney.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action...

8.3AI score0.00967EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2010/06/25 9:0 p.m.27 views

CVE-2010-2461

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

8.3AI score0.00967EPSS
SaveExploits2References4
Rows per page
Query Builder