Lucene search
+L

6534 matches found

seebug.org
seebug.org
•added 2007/02/05 12:00 a.m.•22 views

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz."scripts/session.php";...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/02/03 12:00 a.m.•102 views

dB Masters' Curium CMS <= 1.03(c_id) Remote Blind SQL Injection Vulnerability

Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx : http://www.google.com.tr/search?q=Powered+by+dB+Masters27+Curium+CMS+1&hl=tr&start=0&sa=N In...

0.5AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/02/02 12:00 a.m.•31 views

dB Masters Curium CMS 1.03 - c_id SQL Injection

dB Masters Curium CMS 1.03 - cid SQL Injection Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx :...

0.5AI score
SaveExploits0
zdt
zdt
•added 2007/02/02 12:00 a.m.•34 views

dB Masters Curium CMS <= 1.03 (c_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= dB Masters Curium CMS = 1.03 cid Remote SQL Injection Vulnerability ======================================================================= Title : dB Masters' Curium...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/30 12:00 a.m.•9 views

CVE-2007-0594: Undefined Security Weakness

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD...

5CVSS5.8AI score0.01275EPSS
SaveExploits0References1
Prion
Prion
•added 2007/01/24 9:28 p.m.•29 views

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

9.3CVSS8.4AI score0.36473EPSS
SaveExploits6References88Affected Software79
CVE
CVE
•added 2007/01/24 9:00 p.m.•139 views

CVE-2007-0018

CVE-2007-0018 is a stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), triggered by an overly long argument to the SetFormatLikeSample() function. The flaw is a data validation failure that allows remote code execution when a user visits a malicious web...

9.3CVSS7.7AI score0.36473EPSS
SaveIn wildExploits6References88Affected Software81
seebug.org
seebug.org
•added 2007/01/20 12:00 a.m.•28 views

Bradabra &lt;= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability

No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...

7.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2007/01/19 2:28 a.m.•20 views

DEBIAN-CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

6.8CVSS6AI score0.03321EPSS
SaveExploits4References1
UbuntuCve
UbuntuCve
•added 2007/01/19 2:28 a.m.•34 views

CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

6.8CVSS6AI score0.03321EPSS
SaveExploits4References1
securityvulns
securityvulns
•added 2007/01/09 12:00 a.m.•56 views

M-Core Remote Password Disclosure Vulnerability

M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...

0.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/09 12:00 a.m.•6 views

CVE-2007-0152: Undefined Security Weakness

OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb...

7.5CVSS5.8AI score0.01484EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/09 12:00 a.m.•7 views

CVE-2007-0156: Undefined Security Weakness

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb...

7.5CVSS5.8AI score0.01477EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/05 12:00 a.m.•12 views

CVE-2007-0075: Undefined Security Weakness

AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...

7.5CVSS5.8AI score0.01639EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/05 12:00 a.m.•9 views

CVE-2006-6888: Undefined Security Weakness

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...

5CVSS5.8AI score0.02433EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/05 12:00 a.m.•5 views

CVE-2007-0090: Undefined Security Weakness

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb...

7.5CVSS5.8AI score0.01612EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/05 12:00 a.m.•10 views

CVE-2007-0089: Undefined Security Weakness

jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb...

7.5CVSS5.8AI score0.01612EPSS
SaveExploits1References1
NVD
NVD
•added 2006/12/29 11:28 a.m.•19 views

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

5CVSS6.6AI score0.03927EPSS
SaveExploits2References9
CVE
CVE
•added 2006/12/29 11:00 a.m.•57 views

CVE-2006-6810

DB Hub 0.3 contains an unspecified vulnerability in the clear_user_list function (src/main.c) that allows remote attackers to cause an application crash via crafted network traffic, due to memory corruption. The available sources do not specify affected subcomponents, versions beyond 0.3, exploit...

5CVSS6.9AI score0.03927EPSS
SaveExploits2References9Affected Software1
Cvelist
Cvelist
•added 2006/12/29 11:00 a.m.•31 views

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

6.6AI score0.03927EPSS
SaveExploits2References9
Rows per page
Query Builder