Lucene search
K

3838 matches found

securityvulns
securityvulns
added 2009/04/12 12:0 a.m.55 views

Loggix Project 9.4.5 Blind SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

0.6AI score
Exploits0
seebug.org
seebug.org
added 2009/04/11 12:0 a.m.6 views

Loggix Project 9.4.5 (refer_id) Blind SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2009/04/10 12:0 a.m.27 views

Loggix Project 9.4.5 SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2009/04/10 12:0 a.m.34 views

Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2009/04/07 12:0 a.m.31 views

RHEL 5 : gstreamer-plugins-base (RHSA-2009:0352)

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

7.5CVSS6.4AI score0.02142EPSS
Exploits1References3
securityvulns
securityvulns
added 2009/04/07 12:0 a.m.59 views

Joomla Component com_bookjoomlas SQL Injection Vulnerability

Salvatore "drosophila" Fresta + Application: Joomla Component combookjoomlas + Version: 0.1 + Website: http://www.alikonweb.it + Bugs: A SQL Injection + Exploitation: Remote + Dork: inurl:"index.php?option=combookjoomlas" + Date: 06 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author...

0.7AI score
Exploits0
RedHat Linux
RedHat Linux
added 2009/04/06 4:31 p.m.31 views

Moderate: Red Hat Security Advisory: gstreamer-plugins-base security update

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

7.5CVSS6.3AI score0.02142EPSS
Exploits1References2
NVD
NVD
added 2009/03/31 5:30 p.m.18 views

CVE-2008-6567

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

4.3CVSS5.8AI score0.00329EPSS
Exploits1References5
Prion
Prion
added 2009/03/31 5:30 p.m.18 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

4.3CVSS6.1AI score0.00329EPSS
Exploits1References5
Cvelist
Cvelist
added 2009/03/31 5:0 p.m.23 views

CVE-2008-6567

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

5.8AI score0.00329EPSS
Exploits1References5
Prion
Prion
added 2009/03/06 6:50 a.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6.1AI score0.00296EPSS
Exploits0References3
Cvelist
Cvelist
added 2009/03/03 6:0 p.m.19 views

CVE-2009-0762

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.00296EPSS
Exploits0References3
CVE
CVE
added 2009/03/03 6:0 p.m.48 views

CVE-2009-0762

The CVE-2009-0762 entry describes a Cross-site Scripting (XSS) vulnerability in ScriptEz Ez PHP Comment, where an attacker can inject arbitrary web script or HTML via the name parameter. The affected software component is the Ez PHP Comment feature within ScriptEz Ez (no vendor/version specifics ...

4.3CVSS5.8AI score0.00296EPSS
Exploits0References3Affected Software1
seebug.org
seebug.org
added 2009/03/03 12:0 a.m.11 views

RitsBlog 0.4.2 (AB/XSS) Multiple Remote Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 + Website: http://sourceforge.net/projects/ritsblog/ + Bugs: A SQL Injection B XSS Persistent + Exploitation: Remote + Date: 02 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Autho...

7.1AI score
Exploits0
Prion
Prion
added 2009/03/02 7:30 p.m.11 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

6.8CVSS7.8AI score0.00142EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2009/03/02 7:30 p.m.12 views

CVE-2008-6384

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

6.8CVSS7.2AI score0.00142EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/03/02 7:0 p.m.16 views

CVE-2008-6384

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

7.2AI score0.00142EPSS
Exploits0References4
CVE
CVE
added 2009/03/02 7:0 p.m.47 views

CVE-2008-6384

CVE-2008-6384 affects the Drupal module Comment Mail 5.x; prior to version 5.x-1.1 it contains multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication. The affected component is the Comment Mail 5.x module for Drupal; root cause and exact exploit details a...

6.8CVSS7.4AI score0.00142EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.20 views

Fedora Update for exiv2 FEDORA-2007-4551

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2007-4551 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS7.5AI score0.0234EPSS
Exploits0References2
Prion
Prion
added 2009/02/25 11:30 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."...

4.3CVSS6.1AI score0.00475EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder