Lucene search
+L

209 matches found

Prion
Prion
•added 2012/11/26 10:55 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

4.3CVSS6.1AI score0.01628EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2012/11/26 10:00 p.m.•40 views

CVE-2012-6043

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

6AI score0.01628EPSS
SaveExploits2References3
NVD
NVD
•added 2011/03/23 10:00 p.m.•28 views

CVE-2010-4770

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

7.5CVSS8.3AI score0.01044EPSS
SaveExploits2References5
Prion
Prion
•added 2011/03/23 10:00 p.m.•25 views

Sql injection

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

7.5CVSS9.1AI score0.01044EPSS
SaveExploits2References5
CVE
CVE
•added 2011/03/23 9:00 p.m.•53 views

CVE-2010-4770

CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...

7.5CVSS8.6AI score0.01044EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2011/03/23 9:00 p.m.•41 views

CVE-2010-4770

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

8.3AI score0.01044EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
•added 2011/01/26 12:00 a.m.•14 views

ExtCalendar 'cat_id' parameter SQL Injection

The version of the ExtCalendar installed on the remote host is affected by a SQL injection vulnerability. The application fails to properly sanitize user-supplied input to the 'catid' parameter of the 'calendar.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...

5.9AI score
SaveExploits0
NVD
NVD
•added 2010/03/02 6:30 p.m.•22 views

CVE-2010-0762

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

7.5CVSS8.3AI score0.01214EPSS
SaveExploits2References7
Prion
Prion
•added 2010/03/02 6:30 p.m.•19 views

Sql injection

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

7.5CVSS9.1AI score0.01214EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/02 12:00 a.m.•5 views

CVE-2010-0762: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

7.5CVSS6.4AI score0.01214EPSS
SaveExploits2References2
Prion
Prion
•added 2010/01/18 8:30 p.m.•29 views

Sql injection

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

7.5CVSS8.7AI score0.01333EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2010/01/18 8:00 p.m.•46 views

CVE-2009-4624

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

8.2AI score0.00971EPSS
SaveExploits3References4
seebug.org
seebug.org
•added 2009/12/31 12:00 a.m.•19 views

WordPress 1.5.1 Cat_ID参数SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/10/09 2:30 p.m.•21 views

Sql injection

SQL injection vulnerability in the Soundset comsoundset component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

7.5CVSS9.1AI score0.0095EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2009/10/08 5:30 p.m.•30 views

CVE-2009-3595

SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...

7.5CVSS8.2AI score0.01042EPSS
SaveExploits1References5
Prion
Prion
•added 2009/10/08 5:30 p.m.•24 views

Sql injection

SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...

7.5CVSS8.7AI score0.01042EPSS
SaveExploits3References5Affected Software1
Prion
Prion
•added 2009/10/08 4:30 p.m.•32 views

Sql injection

SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

7.5CVSS8.7AI score0.00971EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2009/10/08 4:30 p.m.•34 views

CVE-2009-3590

SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

7.5CVSS8.2AI score0.00971EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/08 12:00 a.m.•4 views

CVE-2009-3590: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

7.5CVSS6.4AI score0.00971EPSS
SaveExploits2References2
Prion
Prion
•added 2009/09/30 3:30 p.m.•18 views

Sql injection

Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to main.php and 2 gameid parameter to game.php...

7.5CVSS9.3AI score0.00993EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder