Lucene search
+L

1490 matches found

Prion
Prion
added 2007/12/20 12:46 a.m.14 views

Sql injection

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.2AI score0.01044EPSS
SaveExploits2References4
NVD
NVD
added 2007/12/20 12:46 a.m.15 views

CVE-2007-6463

Multiple cross-site scripting XSS vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."...

4.3CVSS5.9AI score0.00845EPSS
SaveExploits0References2
NVD
NVD
added 2007/12/20 12:46 a.m.12 views

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01044EPSS
SaveExploits2References4
CVE
CVE
added 2007/12/20 12:0 a.m.41 views

CVE-2007-6463

CVE-2007-6463 affects PHP Real Estate Classifieds: multiple XSS flaws in the admin panel allow remote injection of arbitrary script via unspecified text areas/boxes. Base score 4.3 (MEDIUM); impact limited to partial integrity compromise and non-sensitive disclosure, with no authentication requir...

4.3CVSS5.9AI score0.00845EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2007/12/20 12:0 a.m.25 views

CVE-2007-6462

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01044EPSS
SaveExploits2References4
CVE
CVE
added 2007/12/20 12:0 a.m.48 views

CVE-2007-6462

CVE-2007-6462 affects PHP Real Estate Classifieds (fullnews.php) where the id parameter is vulnerable to SQL injection. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The vulnerability is documented across multiple feeds (NVD, CVE lists) with a consisten...

7.5CVSS8.5AI score0.01044EPSS
SaveExploits2References4Affected Software1
seebug.org
seebug.org
added 2007/12/18 12:0 a.m.26 views

PHP Real Estate Classifieds 'fullnews.php' SQL注入漏洞

PHP Real Estate Classifieds是一款基于PHP的WEB应用程序。 PHP Real Estate Classifieds不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于''fullnews.php''脚本对用户提交的WEB参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP Real Estate Classifieds Premium Plus 目前没有解决方案提供: http://phprealestatescript.com/...

7.1AI score
SaveExploits0
CVE
CVE
added 2007/10/25 7:0 p.m.40 views

CVE-2003-1520

Technical details for CVE-2003-1520 are not publicly available in the provided documents. No concrete information on affected versions, root cause, or fixes is included. Monitor for updates.

6.8CVSS8.8AI score0.01109EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2007/10/25 7:0 p.m.18 views

CVE-2003-1520

SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter...

8.4AI score0.01109EPSS
SaveExploits2References4
NVD
NVD
added 2007/09/27 5:17 p.m.17 views

CVE-2007-5122

SQL injection vulnerability in storeinfo.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3
CVE
CVE
added 2007/09/27 5:0 p.m.43 views

CVE-2007-5122

The CVE-2007-5122 entry documents a SQL injection vulnerability in SoftBiz Classifieds PLUS, specifically in store_info.php via the id parameter. Remote attackers could potentially execute arbitrary SQL commands. Connected sources confirm the affected component and vulnerability class, but do not...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2007/09/27 5:0 p.m.19 views

CVE-2007-5122

SQL injection vulnerability in storeinfo.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01006EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2007/09/27 12:0 a.m.28 views

softbiz-sql.txt

$ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2007/09/27 12:0 a.m.52 views

Softbiz Classifieds PLUS (id) Remote SQL Injection Vulnerability

No description provided by source. $ Classifieds SQL INJECTION BY IRCRASH &...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/09/26 12:0 a.m.32 views

Softbiz Classifieds PLUS - id SQL Injection

Softbiz Classifieds PLUS - id SQL Injection $ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...

1AI score
SaveExploits0
0day.today
0day.today
added 2007/09/26 12:0 a.m.53 views

Softbiz Classifieds PLUS (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Softbiz Classifieds PLUS id Remote SQL Injection Vulnerability ================================================================ $ Classifieds SQL INJECTION BY IRCRASH AUTHOR ...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/09/26 12:0 a.m.40 views

Softbiz Classifieds PLUS - 'id' SQL Injection

$ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...

7.5CVSS5.8AI score0.01006EPSS
SaveExploits1
NVD
NVD
added 2007/06/11 10:30 p.m.22 views

CVE-2007-3160

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...

7.5CVSS7.5AI score0.03144EPSS
SaveExploits2References6
seebug.org
seebug.org
added 2007/06/10 12:0 a.m.21 views

PHP Real Estate Classifieds Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlePHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit/title script language="JavaScript"...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/06/09 12:0 a.m.13 views

PHP Real Estate Classifieds - Remote File Inclusion

PHP Real Estate Classifieds - Remote File Inclusion PHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit //=============================================================================================== //Script Name: PHP Real Estate Classifieds Premium Plus // not sec...

0.6AI score
SaveExploits0
Rows per page
Query Builder