Lucene search
+L

251 matches found

seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

Online Contact Manager 3.0 delete.php id Parameter XSS

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.32 views

Esoftpro Online Contact Manager Multiple Vulnerabilities

No description provided by source. Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2013/03/12 12:00 a.m.28 views

CentOS Update for evolution CESA-2013:0516 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS7.3AI score0.02673EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/02/22 12:00 a.m.30 views

RedHat Update for evolution RHSA-2013:0516-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS6.5AI score0.02673EPSS
SaveExploits0References3
NVD
NVD
added 2011/11/01 10:55 p.m.28 views

CVE-2010-5001

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.3AI score0.01014EPSS
SaveExploits2References4
Prion
Prion
added 2011/11/01 10:55 p.m.18 views

Sql injection

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01014EPSS
SaveExploits2References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2011/11/01 10:55 p.m.5 views

CVE-2010-5001

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01014EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2011/11/01 10:00 p.m.35 views

CVE-2010-5001

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.3AI score0.01014EPSS
SaveExploits2References4
CVE
CVE
added 2011/11/01 10:00 p.m.52 views

CVE-2010-5001

The CVE-2010-5001 entry concerns the esoftpro Online Contact Manager 3.0. The vulnerability is a SQL injection in view.php triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in the id parameter leading to unintended query ma...

7.5CVSS8.7AI score0.01014EPSS
SaveExploits2References4Affected Software1
zdt
zdt
added 2010/12/30 12:00 a.m.22 views

PHP-AddressBook v6.2.4 (group.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES Script : PHP-AddressBook v6.2.4 Language : PHP DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers &...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2010/12/29 12:00 a.m.22 views

PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES

Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES Script : PHP-AddressBook v6.2.4 Language : PHP DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers & birthdays. vCards, LDIF, Excel, iPhone, Gmail & Google-Ma...

7.6AI score
SaveExploits0
exploitpack
exploitpack
added 2010/12/29 12:00 a.m.21 views

PHP-AddressBook 6.2.4 - group.php SQL Injection

PHP-AddressBook 6.2.4 - group.php SQL Injection Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES Script : PHP-AddressBook v6.2.4 Language : PHP DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers & birthdays...

SaveExploits0
Packet Storm
Packet Storm
added 2010/12/29 12:00 a.m.52 views

PHP-AddressBook 6.2.4 SQL Injection

Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES Script : PHP-AddressBook v6.2.4 Language : PHP DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers & birthdays. vCards, LDIF, Excel, iPhone, Gmail & Google-Ma...

SaveExploits0
Exploit DB
Exploit DB
added 2010/12/29 12:00 a.m.38 views

PHP-AddressBook 6.2.4 - 'group.php' SQL Injection

Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES Script : PHP-AddressBook v6.2.4 Language : PHP DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers & birthdays. vCards, LDIF, Excel, iPhone, Gmail & Google-Ma...

5.3AI score
SaveExploits0
CVE
CVE
added 2010/11/09 8:00 p.m.62 views

CVE-2010-3040

Cisco ICM Setup Manager Agent.exe contains multiple stack-based buffer overflows in TCP port 40078 that allow remote code execution via long parameters in packet types HandleUpgradeAll, AgentUpgrade, HandleQueryNodeInfoReq, and HandleUpgradeTrace. Exploitation leads to arbitrary code running with...

10CVSS7.7AI score0.07995EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2010/11/09 8:00 p.m.53 views

CVE-2010-3040

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...

7.6AI score0.07995EPSS
SaveExploits1References9
CISA
CISA
added 2010/11/08 12:00 a.m.15 views

Cisco Releases Vulnerability Alert for Intelligent Contact Manager

Cisco has released a vulnerability alert to inform users of a vulnerability affecting the Intelligent Contact Manager Setup Manager. This vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the vulnerability alert and consider...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/07/27 12:00 a.m.34 views

Horde Turba Contact Manager '/imp/test.php' XSS Vulnerability

Turba Contact Manager is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

4.3CVSS5.7AI score0.01304EPSS
SaveExploits0References1
NVD
NVD
added 2010/07/12 1:27 p.m.26 views

CVE-2009-4926

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

4.3CVSS5.8AI score0.01636EPSS
SaveExploits6References3
Prion
Prion
added 2010/07/12 1:27 p.m.21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Online Contact Manager formerly EContact PRO 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showGroup parameter to a index.php and the 2 id parameter to b view.php, c email.php, d edit.php, and e delete.php...

4.3CVSS6.1AI score0.01636EPSS
SaveExploits6References3Affected Software1
Rows per page
Query Builder