CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8132 matches found

Cvelist•added 2007/07/06 7:00 p.m.•34 views

CVE-2005-4853

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings...

6.3AI score0.01451EPSS

SaveExploits0References2

xssed•added 2007/07/06 12:00 a.m.•15 views

Unfixed XSS vulnerability at www.cikcik.com

Security researcher St@rExT, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.cikcik.com, which at the time of submission ranked 47755 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2007/07/06 12:00 a.m.•5 views

CVE-2005-4853: Undefined Security Weakness

9.4CVSS6AI score0.01451EPSS

SaveExploits0References2

Prion•added 2007/07/03 8:30 p.m.•34 views

Directory traversal

Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...

6.4CVSS7.8AI score0.0264EPSS

SaveExploits2References5Affected Software1

NVD•added 2007/07/03 8:30 p.m.•23 views

CVE-2007-3535

6.4CVSS7.3AI score0.0264EPSS

SaveExploits2References5

Prion•added 2007/07/03 8:30 p.m.•31 views

Sql injection

Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...

7.5CVSS9.3AI score0.04833EPSS

SaveExploits1References13Affected Software2

NVD•added 2007/07/03 8:30 p.m.•34 views

CVE-2007-3539

7.5CVSS8.5AI score0.04833EPSS

SaveExploits1References13

Cvelist•added 2007/07/03 8:00 p.m.•41 views

CVE-2007-3535

7.3AI score0.0264EPSS

SaveExploits2References5

CVE•added 2007/07/03 8:00 p.m.•72 views

CVE-2007-3535

GL-SH Deaf Forum 6.4.4 (and earlier) contains directory traversal flaws that allow remote attackers to include and execute arbitrary local files via two parameters: FORUM_LANGUAGE in functions.php and style in bottom.php. Root cause: improper validation/sanitization enabling …/ path traversal. Im...

6.4CVSS7.3AI score0.0264EPSS

SaveExploits2References5Affected Software1

CVE•added 2007/07/03 8:00 p.m.•75 views

CVE-2007-3539

Multiple SQL injection vulnerabilities in QuickTicket 1.2 (build:20070621) and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL via parameter misuse in several pages: (1) t and (2) f in qti_ind_post.php and qti_ind_post_prt.php; (3) dir and (4) order in qti_ind_member.php; (5) ...

7.5CVSS8.5AI score0.04833EPSS

SaveExploits1References13Affected Software2

Cvelist•added 2007/07/03 8:00 p.m.•48 views

CVE-2007-3539

8.5AI score0.04833EPSS

SaveExploits1References13

Rapid7 Vulnerability Database (full)•added 2007/07/03 12:00 a.m.•8 views

CVE-2007-3535: Undefined Security Weakness

6.4CVSS6.3AI score0.0264EPSS

SaveExploits2References1

Rapid7 Vulnerability Database (full)•added 2007/07/03 12:00 a.m.•8 views

CVE-2007-3539: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS6.4AI score0.04833EPSS

SaveExploits1References2

Prion•added 2007/07/02 7:30 p.m.•38 views

Directory traversal

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

6.4CVSS7.8AI score0.07939EPSS

SaveExploits1References8Affected Software1

NVD•added 2007/07/02 7:30 p.m.•26 views

CVE-2007-3505

6.4CVSS7.3AI score0.07939EPSS

SaveExploits1References8

Cvelist•added 2007/07/02 7:00 p.m.•34 views

CVE-2007-3505

7.3AI score0.07939EPSS

SaveExploits1References8

CVE•added 2007/07/02 7:00 p.m.•68 views

CVE-2007-3505

CVE-2007-3505 involves multiple directory traversal flaws in QuickTalk forum 1.3 that allow remote attackers to include and execute arbitrary local files via a .. sequence in the lang parameter of qtf_checkname.php, qtf_j_birth.php, or qtf_j_exists.php. The affected component is the QuickTalk for...

6.4CVSS7.3AI score0.07939EPSS

SaveExploits1References8Affected Software1

Rapid7 Vulnerability Database (full)•added 2007/07/02 12:00 a.m.•5 views

CVE-2007-3505: Undefined Security Weakness

6.4CVSS6.3AI score0.07939EPSS

SaveExploits1References1

myhack58•added 2007/06/29 12:00 a.m.•46 views

Various sites program's default database-vulnerability warning-the black bar safety net

Action Network: The default database /data/dvbbs7. mdb BACKUP DATABASE /databackup/dvbbs7. mdb Front: Username: admin Key code: admin888 Background: Username: admin Key code: admin888 --------------- bbsxp: The default database database/bbsxp. mdb ＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿ LeadBBS The default database...

1.4AI score

SaveExploits0

seebug.org•added 2007/06/29 12:00 a.m.•51 views

GL-SH Deaf Forum <= 6.4.4 Local File Inclusion Vulnerabilities

No description provided by source. GL-SH Deaf Board Version = 6.4.4 local file inclusion download: http://www.frank-karau.de/download/Deafforumversion6.4.3.zip found by: Katatafish [email protected] google dork:"2005 www.frank-karau.de" | "2006 www.frank-karau.de" exploit:...

7.1AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by