Lucene search
+L

601 matches found

Exploit DB
Exploit DB
added 2010/01/08 12:0 a.m.21 views

Joomla! Component Jobads - 'type' SQL Injection

source: https://www.securityfocus.com/bid/37686/info The Jobads component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/12/31 12:0 a.m.14 views

Freewebscriptz Online Games Login - Multiple SQL Injections

Freewebscriptz Online Games Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/41267/info Free Web Scriptâ??z Online Games is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2009/11/19 12:0 a.m.20 views

CubeCart 3.0.44.3.6 - ProductID SQL Injection

CubeCart 3.0.44.3.6 - ProductID SQL Injection source: https://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

SaveExploits0
Exploit DB
Exploit DB
added 2009/09/22 12:0 a.m.32 views

Maxwebportal 1.365 - 'forum.asp' SQL Injection

source: https://www.securityfocus.com/bid/36480/info MaxWebPortal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2009/09/21 12:0 a.m.23 views

WX-Guestbook 1.1.208 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/41741/info WX-Guestbook is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or...

5.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/09/11 12:0 a.m.22 views

Joomla! Component com_mediaalert - 'id' SQL Injection

source: https://www.securityfocus.com/bid/36356/info The 'commediaalert' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/08/28 12:0 a.m.12 views

Tukanas Classifieds 1.0 - index.php SQL Injection

Tukanas Classifieds 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/24 12:0 a.m.18 views

Clipbucket 1.7.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43383/info ClipBucket is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

5.8AI score
SaveExploits0
zdt
zdt
added 2009/07/15 12:0 a.m.29 views

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/04/24 12:0 a.m.33 views

PuterJam's Blog PJBlog3 3.0.6 - 'action.asp' SQL Injection

source: https://www.securityfocus.com/bid/34701/info PJBlog3 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/03/29 12:0 a.m.16 views

YAP Multiple SQL Injection Vulnerabilities

YAP is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

6.5CVSS0.5AI score0.00877EPSS
SaveExploits3References1
Exploit DB
Exploit DB
added 2009/03/17 12:0 a.m.17 views

phpCMS 2008 - 'search_ajax.php' SQL Injection

source: https://www.securityfocus.com/bid/34225/info PHPCMS2008 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/03/06 12:0 a.m.30 views

Scripts For Sites EZ Hotscripts SQLi Vulnerability (32031) - Active Check

EZ Hotscripts is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7.5CVSS7.3AI score0.02321EPSS
SaveExploits3References1
exploitpack
exploitpack
added 2009/02/23 12:0 a.m.11 views

Joomla! Mambo Component gigCalendar 1.0 - banddetails.php SQL Injection

Joomla! Mambo Component gigCalendar 1.0 - banddetails.php SQL Injection source: https://www.securityfocus.com/bid/33859/info The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/01/15 12:0 a.m.34 views

Active Bids - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33306/info Active Auction House and Active Auction Pro are prone to SQL-injection and cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2008/12/11 12:0 a.m.20 views

Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection

source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

7.5CVSS5.8AI score0.03354EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2008/11/28 12:0 a.m.32 views

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure

source: https://www.securityfocus.com/bid/32563/info RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities. Exploiting these issues can allow attackers to obtain sensitive information, steal cookie data, access or modify data, or exploit latent vulnerabilities in the underlying...

7.8CVSS5.8AI score0.02524EPSS
SaveExploits2
exploitpack
exploitpack
added 2008/11/28 12:0 a.m.14 views

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure source: https://www.securityfocus.com/bid/32563/info RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities. Exploiting these issues can allow attackers to obtain sensitive information, steal cookie...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/11/17 12:0 a.m.35 views

wholesale-sql.txt

| | | Wholesale track.php id Remote SQL Injection Vulnerability | | | | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: [email protected] | | | | script : http://www.phpstore.info/productinfo.php?cPath=3653&productsid=162 | | DorK : inurl:"track.php?id=" | Exploit:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/21 12:0 a.m.26 views

PHPhotoGallery 0.92 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/31850/info phPhotoGallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

7.5CVSS5.8AI score0.01753EPSS
SaveExploits2
Rows per page
Query Builder