Lucene search
+L

290 matches found

Prion
Prion
•added 2012/11/27 4:49 a.m.•21 views

Code injection

Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...

10CVSS7.8AI score0.04131EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2012/11/27 2:00 a.m.•34 views

CVE-2012-6046

Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...

7.2AI score0.04131EPSS
SaveExploits2References3
CVE
CVE
•added 2012/11/27 2:00 a.m.•52 views

CVE-2012-6046

The CVE-2012-6046 entry concerns a static code injection in admin/banners.php of PHP Enter, allowing remote attackers to inject arbitrary PHP code into horad.php via the code parameter. Connected sources confirm the same description and indicate a high-severity impact (complete confidentiality, i...

10CVSS7.5AI score0.04131EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/27 12:00 a.m.•5 views

CVE-2012-6046: Improper Control of Generation of Code

Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...

10CVSS6AI score0.04131EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2012/06/28 12:00 a.m.•33 views

Chiangrai Enter Soft Design SQL Injection

Exploit Title; Chiangrai Enter Soft Design SQL Injection Vulnerability Date ; 28/6/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.chiangraientersoft.com/ Category ; Webapps Type ; SQL Injection MySQLi Tested on ; Ubuntu / Win7 / Backtrack Demo Analyzing ;...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/05/08 12:00 a.m.•16 views

PHP Enter 4.1.2 - banners.php PHP Code Injection

PHP Enter 4.1.2 - banners.php PHP Code Injection source: https://www.securityfocus.com/bid/53426/info PHP Enter is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/05/08 12:00 a.m.•73 views

PHP Enter Code Injection

Exploit Title : Php Enter Php Code Injection Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.phpenter.net/ Security Risk : High Version : beta Tested on : win\XP Dork : allintext: "Power...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/05/08 12:00 a.m.•53 views

PHP Enter 4.1.2 - 'banners.php' PHP Code Injection

source: https://www.securityfocus.com/bid/53426/info PHP Enter is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the...

10CVSS5.2AI score0.04131EPSS
SaveExploits2
NVD
NVD
•added 2011/11/01 10:55 p.m.•28 views

CVE-2010-4984

SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...

7.5CVSS8.3AI score0.01017EPSS
SaveExploits2References5
Prion
Prion
•added 2011/11/01 10:55 p.m.•23 views

Sql injection

SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...

7.5CVSS9AI score0.01017EPSS
SaveExploits2References5
Prion
Prion
•added 2011/11/01 10:55 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box...

4.3CVSS6.1AI score0.01519EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/01 12:00 a.m.•4 views

CVE-2010-4985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box...

4.3CVSS6AI score0.01519EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/01 12:00 a.m.•2 views

CVE-2010-4984: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...

7.5CVSS6.4AI score0.01017EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2011/10/14 12:00 a.m.•61 views

Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities - Mac OS X

Mozilla Firefox/Thunderbird/Seamonkey is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.3CVSS8.4AI score0.03983EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2011/10/04 12:00 a.m.•33 views

Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsdialogbypassnuseafterfreememcrptnvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla...

9.3CVSS8.2AI score0.03983EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2011/10/04 12:00 a.m.•32 views

Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

9.3CVSS8.4AI score0.03983EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2011/09/29 12:55 a.m.•4 views

CVE-2011-3001

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...

4.3CVSS7.9AI score0.01467EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2011/09/29 12:00 a.m.•46 views

Mozilla Thunderbird < 7.0 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...

10CVSS7.9AI score0.05459EPSS
SaveExploits3References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/09/29 12:00 a.m.•3 views

CVE-2011-3001: Undefined Security Weakness

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...

4.3CVSS5.9AI score0.01467EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2011/09/28 11:41 p.m.•11 views

Mozilla: Code installation through holding down Enter (MFSA 2011-40)

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site...

3.5CVSS8AI score0.00921EPSS
SaveExploits0References4
Rows per page
Query Builder