Lucene search
+L

2671 matches found

Cvelist
Cvelist
•added 2009/07/22 5:09 p.m.•34 views

CVE-2009-2569

Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...

5.8AI score0.01761EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/22 12:00 a.m.•7 views

CVE-2009-2569: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...

4.3CVSS5.8AI score0.01761EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2009/07/20 12:00 a.m.•28 views

Netrix CMS 1.0 SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + Script site : www.netrix.hu +...

0.5AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/07/20 12:00 a.m.•34 views

Netrix CMS 1.0 Authentication Bypass Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oq...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/07/20 12:00 a.m.•23 views

Netrix CMS 1.0 - Authentication Bypass

Netrix CMS 1.0 - Authentication Bypass ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by :...

0.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/07/20 12:00 a.m.•37 views

Netrix CMS 1.0 - Authentication Bypass

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + Script site : www.netrix.hu +...

5CVSS5.8AI score0.01971EPSS
SaveExploits2
NVD
NVD
•added 2009/07/14 2:30 p.m.•24 views

CVE-2008-6859

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS7.2AI score0.02511EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2009/07/14 2:00 p.m.•40 views

CVE-2008-6859

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.2AI score0.02511EPSS
SaveExploits2References4
CVE
CVE
•added 2009/07/14 2:00 p.m.•68 views

CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

7.5CVSS5.9AI score0.02511EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/14 12:00 a.m.•6 views

CVE-2008-6859: Improper Authentication

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS5.8AI score0.02511EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2009/07/10 12:00 a.m.•47 views

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

0.5AI score
SaveExploits0
zdt
zdt
•added 2009/07/09 12:00 a.m.•41 views

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications ===================================================== Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit ===================================================== ......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwah...

7.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2009/06/22 8:30 p.m.•8 views

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters...

9.8CVSS5.8AI score0.11776EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2009/05/30 12:00 a.m.•39 views

Arab Portal 2.2 SQL Injection

Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...

0.3AI score
SaveExploits0
Atlassian
Atlassian
•added 2009/05/29 4:14 a.m.•31 views

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2009/05/29 4:14 a.m.•31 views

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2009/05/29 4:14 a.m.•28 views

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

2.4AI score
SaveExploits0
zdt
zdt
•added 2009/05/29 12:00 a.m.•66 views

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/29 12:00 a.m.•31 views

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/05/27 12:00 a.m.•68 views

AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities ==================================================== AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected:...

7.1AI score
SaveExploits0
Rows per page
Query Builder