Lucene search
+L

2849 matches found

exploitpack
exploitpack
added 2006/07/31 12:00 a.m.15 views

Banex PHP MySQL Banner Exchange 2.21 - signup.php?site_name SQL Injection

Banex PHP MySQL Banner Exchange 2.21 - signup.php?sitename SQL Injection source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/07/31 12:00 a.m.26 views

Banex PHP MySQL Banner Exchange 2.21 - 'members.php?cfg_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the SQL-injection vulnerabilities to...

7.5CVSS5.8AI score0.02272EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/07/31 12:00 a.m.15 views

Banex PHP MySQL Banner Exchange 2.21 - members.php?cfg_root Remote File Inclusion

Banex PHP MySQL Banner Exchange 2.21 - members.php?cfgroot Remote File Inclusion source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize...

SaveExploits0
Exploit DB
Exploit DB
added 2006/07/31 12:00 a.m.25 views

Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the SQL-injection vulnerabilities to...

7.5CVSS5.8AI score0.01071EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2006/07/31 12:00 a.m.29 views

Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection

source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the SQL-injection vulnerabilities to...

7.5CVSS5.8AI score0.01071EPSS
SaveExploits3
NVD
NVD
added 2006/07/18 3:46 p.m.18 views

CVE-2006-3607

Multiple cross-site scripting XSS vulnerabilities in Softbiz Banner Exchange Script aka Banner Exchange Network Script 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the city parameter in a insertmember.php, and 2 a PHPSESSID cookie in b lostpassword.php, c...

4.3CVSS5.8AI score0.01764EPSS
SaveExploits5References5
Cvelist
Cvelist
added 2006/07/14 9:00 p.m.23 views

CVE-2006-3607

Multiple cross-site scripting XSS vulnerabilities in Softbiz Banner Exchange Script aka Banner Exchange Network Script 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the city parameter in a insertmember.php, and 2 a PHPSESSID cookie in b lostpassword.php, c...

5.8AI score0.01764EPSS
SaveExploits5References5
CVE
CVE
added 2006/07/14 9:00 p.m.46 views

CVE-2006-3607

The vulnerability CVE-2006-3607 affects Softbiz Banner Exchange Script (aka Banner Exchange Network Script) version 1.0. The issue is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML. Specifically, the city parameter in insertmember.php ...

4.3CVSS6AI score0.01764EPSS
SaveExploits5References5Affected Software1
Positive Technologies
Positive Technologies
added 2006/07/14 12:00 a.m.8 views

PT-2006-4482 · Softbiz · Softbiz Banner Exchange Script

Name of the Vulnerable Software and Affected Versions: Softbiz Banner Exchange Script versions 1.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the city paramet...

4.3CVSS6AI score0.01764EPSS
SaveExploits5References10
NVD
NVD
added 2006/07/11 11:05 p.m.13 views

CVE-2006-3519

Multiple cross-site scripting XSS vulnerabilities in The Banner Engine tbe 4.0 allow remote attackers to execute arbitrary web script or HTML via the 1 text parameter in a search action to a top.php, and the 2 adminpass or 3 adminlogin parameter to b signup.php...

5.8CVSS6.1AI score0.01458EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2006/07/11 11:00 p.m.20 views

CVE-2006-3519

Multiple cross-site scripting XSS vulnerabilities in The Banner Engine tbe 4.0 allow remote attackers to execute arbitrary web script or HTML via the 1 text parameter in a search action to a top.php, and the 2 adminpass or 3 adminlogin parameter to b signup.php...

6.1AI score0.01458EPSS
SaveExploits1References7
CVE
CVE
added 2006/07/11 11:00 p.m.42 views

CVE-2006-3519

CVE-2006-3519 concerns multiple XSS flaws in The Banner Engine (tbe) 4.0. The NVD entry documents that remote attackers can inject arbitrary web script/HTML via: (a) the text parameter in a search action to top.php, and (b) the adminpass or (c) adminlogin parameter to signup.php. The accompanying...

5.8CVSS6.3AI score0.01458EPSS
SaveExploits1References7Affected Software1
Packet Storm
Packet Storm
added 2006/07/09 12:00 a.m.30 views

tbe40-XSS.txt

The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=%3Cscript%3Ealert%22Ellipsis+Security+Test%22%3C/script%3E...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2006/07/04 12:00 a.m.38 views

TBE 4.0 XSS

The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=3Cscript3Ealert22Ellipsis+Security+Test223C/script3E...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/07/03 12:00 a.m.40 views

CentOS 3 : openssh (CESA-2005:550)

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This includes the core file...

5CVSS7.3AI score0.03366EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2006/07/02 12:00 a.m.30 views

softbiz10.txt

Softbiz Banner Exchange Network 1.0 http://softbizscripts.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/insertmember.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 152...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2006/06/30 12:00 a.m.36 views

Softbiz Banner Exchange 1.0 XSS

Softbiz Banner Exchange Network 1.0 http://softbizscripts.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/insertmember.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 152...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2006/06/29 12:00 a.m.10 views

SoftBiz Banner Exchange Script 1.0 - gen_confirm_mem.php?PHPSESSID Cross-Site Scripting

SoftBiz Banner Exchange Script 1.0 - genconfirmmem.php?PHPSESSID Cross-Site Scripting source: https://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying ...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2006/06/29 12:00 a.m.12 views

SoftBiz Banner Exchange Script 1.0 - index.php?PHPSESSID Cross-Site Scripting

SoftBiz Banner Exchange Script 1.0 - index.php?PHPSESSID Cross-Site Scripting source: https://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying it to...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2006/06/29 12:00 a.m.12 views

SoftBiz Banner Exchange Script 1.0 - lostpassword.php?PHPSESSID Cross-Site Scripting

SoftBiz Banner Exchange Script 1.0 - lostpassword.php?PHPSESSID Cross-Site Scripting source: https://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying i...

6.8AI score
SaveExploits0
Rows per page
Query Builder