Lucene search
+L

4017 matches found

seebug.org
seebug.org
added 2009/04/11 12:0 a.m.10 views

Loggix Project 9.4.5 (refer_id) Blind SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/04/10 12:0 a.m.38 views

Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/04/10 12:0 a.m.31 views

Loggix Project 9.4.5 SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/04/07 12:0 a.m.32 views

RHEL 5 : gstreamer-plugins-base (RHSA-2009:0352)

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

7.5CVSS6.4AI score0.05523EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2009/04/07 12:0 a.m.66 views

Joomla Component com_bookjoomlas SQL Injection Vulnerability

Salvatore "drosophila" Fresta + Application: Joomla Component combookjoomlas + Version: 0.1 + Website: http://www.alikonweb.it + Bugs: A SQL Injection + Exploitation: Remote + Dork: inurl:"index.php?option=combookjoomlas" + Date: 06 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author...

0.7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2009/04/06 4:31 p.m.35 views

Moderate: Red Hat Security Advisory: gstreamer-plugins-base security update

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

7.5CVSS6.3AI score0.05523EPSS
SaveExploits1References2
Prion
Prion
added 2009/03/31 5:30 p.m.23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

4.3CVSS6.1AI score0.01107EPSS
SaveExploits1References5
NVD
NVD
added 2009/03/31 5:30 p.m.25 views

CVE-2008-6567

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

4.3CVSS5.8AI score0.01107EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2009/03/31 5:0 p.m.33 views

CVE-2008-6567

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

5.8AI score0.01107EPSS
SaveExploits1References5
Prion
Prion
added 2009/03/06 6:50 a.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6.1AI score0.01022EPSS
SaveExploits0References3
CVE
CVE
added 2009/03/03 6:0 p.m.56 views

CVE-2009-0762

The CVE-2009-0762 entry describes a Cross-site Scripting (XSS) vulnerability in ScriptEz Ez PHP Comment, where an attacker can inject arbitrary web script or HTML via the name parameter. The affected software component is the Ez PHP Comment feature within ScriptEz Ez (no vendor/version specifics ...

4.3CVSS5.8AI score0.01022EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2009/03/03 6:0 p.m.27 views

CVE-2009-0762

Cross-site scripting XSS vulnerability in ScriptsEz Ez PHP Comment allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.01022EPSS
SaveExploits0References3
seebug.org
seebug.org
added 2009/03/03 12:0 a.m.14 views

RitsBlog 0.4.2 (AB/XSS) Multiple Remote Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 + Website: http://sourceforge.net/projects/ritsblog/ + Bugs: A SQL Injection B XSS Persistent + Exploitation: Remote + Date: 02 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Autho...

7.1AI score
SaveExploits0
NVD
NVD
added 2009/03/02 7:30 p.m.16 views

CVE-2008-6384

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

6.8CVSS7.2AI score0.00581EPSS
SaveExploits0References4
Prion
Prion
added 2009/03/02 7:30 p.m.14 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

6.8CVSS7.8AI score0.00581EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2009/03/02 7:0 p.m.50 views

CVE-2008-6384

CVE-2008-6384 affects the Drupal module Comment Mail 5.x; prior to version 5.x-1.1 it contains multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication. The affected component is the Comment Mail 5.x module for Drupal; root cause and exact exploit details a...

6.8CVSS7.4AI score0.00581EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2009/03/02 7:0 p.m.23 views

CVE-2008-6384

Multiple cross-site request forgery CSRF vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators...

7.2AI score0.00581EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.23 views

Fedora Update for exiv2 FEDORA-2007-4551

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2007-4551 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS7.5AI score0.04871EPSS
SaveExploits0References2
NVD
NVD
added 2009/02/25 11:30 p.m.19 views

CVE-2008-6283

Cross-site scripting XSS vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."...

4.3CVSS5.6AI score0.01223EPSS
SaveExploits0References6
Prion
Prion
added 2009/02/25 11:30 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."...

4.3CVSS6.1AI score0.01223EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder