Lucene search
+L

88 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/10 12:00 a.m.•4 views

CVE-2006-4069: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Elaine Aquino Online Zone Journals OZJournals 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 m and 2 c parameters in index.php, 3 a search action, and 4 a "submit comment" action...

4.3CVSS5.9AI score0.02438EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2006/04/06 10:00 a.m.•37 views

CVE-2006-1638

Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 Username parameter to a accounts.php, b changep.php, c editac.php, d feedback.php, e fpass.php, f login.php, g post.php, h reply.php, or i replylog.php; 2 p parameter to j...

8.5AI score0.01855EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/27 12:00 a.m.•3 views

CVE-2005-4674: Undefined Security Weakness

Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/27 12:00 a.m.•4 views

CVE-2005-4675: Undefined Security Weakness

Cross-site scripting XSS vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter...

4.3CVSS6AI score0.01717EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/25 12:00 a.m.•2 views

CVE-2004-2524: Undefined Security Weakness

clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...

5CVSS5.9AI score0.01723EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/02 12:00 a.m.•3 views

CVE-2005-2788: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Land Down Under LDU 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to 1 events.php, 2 index.php, or 3 list.php...

7.5CVSS6.4AI score0.02411EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/23 12:00 a.m.•3 views

CVE-2005-2674: Undefined Security Weakness

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...

4.3CVSS5.7AI score0.01768EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/07/12 12:00 a.m.•3 views

CVE-2000-0545: Undefined Security Weakness

Buffer overflow in mailx mail command aka Mail on Linux systems allows local users to gain privileges via a long -c carbon copy parameter...

4.6CVSS5.8AI score0.00882EPSS
SaveExploits2References1
Rows per page
Query Builder