Lucene search
+L

4037 matches found

NVD
NVD
•added 2006/04/19 4:06 p.m.•25 views

CVE-2006-1852

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

7.5CVSS8.4AI score0.01111EPSS
SaveExploits1References3
CVE
CVE
•added 2006/04/19 4:00 p.m.•53 views

CVE-2006-1852

The CVE-2006-1852 entry documents a SQL injection in the PHP file category.php of Article Publisher Pro versions ≤ 1.0.1. The vulnerability allows a remote attacker to inject arbitrary SQL through the cname parameter, enabling potential data disclosure/ modification and compromising the applicati...

7.5CVSS8.4AI score0.01111EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2006/04/19 4:00 p.m.•28 views

CVE-2006-1852

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

8.4AI score0.01111EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/19 12:00 a.m.•5 views

CVE-2006-1852: Undefined Security Weakness

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

7.5CVSS6.4AI score0.01111EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 2006/04/19 12:00 a.m.•26 views

Article Publisher 1.0.1 Pro - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker...

7.5CVSS5.8AI score0.01111EPSS
SaveExploits1
exploitpack
exploitpack
•added 2006/04/19 12:00 a.m.•18 views

Article Publisher 1.0.1 Pro - Multiple SQL Injections

Article Publisher 1.0.1 Pro - Multiple SQL Injections source: https://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

0.6AI score
SaveExploits0
CVE
CVE
•added 2006/04/03 2:00 p.m.•72 views

CVE-2006-1438

The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...

6.8CVSS5.9AI score0.01485EPSS
SaveExploits0References7Affected Software1
securityvulns
securityvulns
•added 2006/03/22 12:00 a.m.•52 views

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

0.5AI score
SaveExploits0
myhack58
myhack58
•added 2006/03/07 12:00 a.m.•40 views

ASP back door of the place method-vulnerability warning-the black bar safety net

Transmission in the broiler on the asp back door, even if you modified the code, escaped the virus, but a careful administrator will also be found on his website, the web directory will be more than one asp file. For this question, I think the two approaches, and nothing technical at all, just an...

0.1AI score
SaveExploits0
OSV
OSV
•added 2006/02/02 11:02 a.m.•15 views

DEBIAN-CVE-2006-0517

Multiple SQL injection vulnerabilities in formulaires/inc-formulaireforum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 idforum, 2 idarticle, or 3 idbreve parameters to forum.php3; 4 unspecified vectors related...

7.5CVSS6.7AI score0.03304EPSS
SaveExploits1References1
myhack58
myhack58
•added 2006/01/15 12:00 a.m.•34 views

The shelling of the network database-vulnerability warning-the black bar safety net

Say to a website is the lifeblood of, non-database, website database which usually contains the entire website of news, articles, registered users, password and other information, for some companies, the government type of website, which even contains the important business information, so...

6.8AI score
SaveExploits0
CVE
CVE
•added 2005/12/28 11:00 a.m.•67 views

CVE-2005-4549

CVE-2005-4549 describes a cross-site scripting (XSS) vulnerability in the Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the RowKeyValue parameter in the PORTAL schema and the title and content fi...

4.3CVSS5.6AI score0.02741EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2005/12/28 11:00 a.m.•32 views

CVE-2005-4549

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

5.4AI score0.02741EPSS
SaveExploits1References5
exploitpack
exploitpack
•added 2005/12/21 12:00 a.m.•18 views

Commercial Interactive Media SCOOP! 2.3 - articleSearch.asp Cross-Site Scripting

Commercial Interactive Media SCOOP! 2.3 - articleSearch.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...

SaveExploits0
CVE
CVE
•added 2005/11/26 10:00 p.m.•54 views

CVE-2005-3844

CVE-2005-3844 concerns a SQL injection vulnerability in the phpWordWordPress PHP News and Article Manager 3.0. The issue allows remote attackers to execute arbitrary SQL commands via parameters: (1) poll and (2) category in index.php, and (3) ctg in an archive action. Affected software is the PHP...

7.5CVSS6.6AI score0.01233EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/26 12:00 a.m.•3 views

CVE-2005-3844: Undefined Security Weakness

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

7.5CVSS6.4AI score0.01233EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/26 12:00 a.m.•3 views

CVE-2005-3828: Undefined Security Weakness

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

7.5CVSS6.4AI score0.01211EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•51 views

IE VBScript Handling patch (Q318089)

Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.7AI score0.18223EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•43 views

SMB Registry : SQL7 Patches

The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...

7.5CVSS0.7AI score0.49698EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•46 views

INN buffer overflow

The remote version of this INN InterNetNews server does not do proper bounds checking. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS6.9AI score0.02694EPSS
SaveExploits1References2
Rows per page
Query Builder