CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

116 matches found

NVD•added 2008/09/30 6:15 p.m.•29 views

CVE-2008-4356

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via 1 the nid parameter to index.php in a View action to the News module; 2 the vid parameter to index.php in a Result action to the Voting module; 3 the fid parameter t...

7.5CVSS8.5AI score0.00967EPSS

SaveExploits2References4

Prion•added 2008/09/30 6:15 p.m.•27 views

Sql injection

7.5CVSS9.3AI score0.00967EPSS

SaveExploits2References4Affected Software1

Cvelist•added 2008/09/30 6:00 p.m.•39 views

CVE-2008-4356

8.5AI score0.00967EPSS

SaveExploits2References4

OpenVAS•added 2008/08/22 12:00 a.m.•29 views

PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability

Description : A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. When the forum module is activated, a registered user can execute arbitrary SQL injection commands. The failure exists because the application does not properly sanitize...

7.5CVSS7.9AI score0.01565EPSS

SaveExploits1References2

Prion•added 2008/01/18 10:00 p.m.•31 views

Sql injection

SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866...

7.5CVSS8.7AI score0.01051EPSS

SaveExploits2References3Affected Software1

NVD•added 2008/01/18 10:00 p.m.•24 views

CVE-2008-0355

7.5CVSS8.1AI score0.00967EPSS

SaveExploits2References3

Cvelist•added 2008/01/18 9:00 p.m.•30 views

CVE-2008-0355

8.1AI score0.00967EPSS

SaveExploits2References3

CVE•added 2008/01/18 9:00 p.m.•52 views

CVE-2008-0355

The vulnerability CVE-2008-0355 concerns PHPEcho CMS. A SQL injection exists in index.php within the forum module (likely in version 2.0-rc3 and earlier), allowing remote attackers to run arbitrary SQL commands via the id parameter in a section action. This is a distinct vector from CVE-2007-2866...

7.5CVSS8.2AI score0.00967EPSS

SaveExploits2References3Affected Software1

Packet Storm•added 2007/08/08 12:00 a.m.•39 views

auracms-sql.txt

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

7.4AI score

SaveExploits0

Prion•added 2007/08/07 10:17 a.m.•21 views

Sql injection

SQL injection vulnerability in komentar.php in the Forum Module for auraCMS Modul Forum Sederhana allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information...

7.5CVSS8.7AI score0.01396EPSS

SaveExploits1References6

Cvelist•added 2007/08/07 10:00 a.m.•35 views

CVE-2007-4171

8.2AI score0.01396EPSS

SaveExploits1References6

CVE•added 2007/08/07 10:00 a.m.•61 views

CVE-2007-4171

The CVE-2007-4171 entry describes a SQL injection in auraCMS’s Forum Module (Forum Sederhana) via the id parameter to the default URI, affecting komentar.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impacts described as partial confidentiality/integrity/a...

7.5CVSS8.3AI score0.01396EPSS

SaveExploits1References6Affected Software1

securityvulns•added 2007/08/06 12:00 a.m.•86 views

AuraCMS [Forum Module] - Remote SQL Injection

0.7AI score

SaveExploits0

seebug.org•added 2007/08/06 12:00 a.m.•57 views

AuraCMS [Forum Module] Remote SQL Injection Vulnerability

No description provided by source. AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum"...

7.1AI score

SaveExploits0

seebug.org•added 2007/08/05 12:00 a.m.•63 views

AuraCMS [Forum Module] Remote SQL Injection Vulnerability

7.1AI score

SaveExploits0

exploitpack•added 2007/08/05 12:00 a.m.•63 views

AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - SQL Injection AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=foru...

0.5AI score

SaveExploits0

zdt•added 2007/08/05 12:00 a.m.•100 views

AuraCMS [Forum Module] Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= AuraCMS Forum Module Remote SQL Injection Vulnerability ========================================================= AuraCMS Forum Module - Remote SQL Injection Vendor :...

7.1AI score

SaveExploits0

Exploit DB•added 2007/08/05 12:00 a.m.•70 views

AuraCMS Forum Module - SQL Injection

7.5CVSS5.8AI score0.01396EPSS

SaveExploits1

Exploit DB•added 2007/02/07 12:00 a.m.•47 views

otscms 2.1.5 - SQL Injection / Cross-Site Scripting

Coding 4 Fun Name = OTSCMS 2.1.5 by Wrzasq http://otscms.com ; Class = Sql Injection / XSS ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4f.pl http://c4f.pl ;...

7.5CVSS5.8AI score0.01786EPSS

SaveExploits3

NVD•added 2006/12/14 1:28 a.m.•16 views

CVE-2006-6522

Multiple cross-site scripting XSS vulnerabilities in WikiTimeScale TwoZero before 2.31 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the 1 forum module and 2 event descriptions. NOTE: some of these details are obtained from third party information...

6.8CVSS5.8AI score0.01191EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by