Lucene search
+L

533 matches found

Cvelist
Cvelist
•added 2005/12/05 11:00 a.m.•39 views

CVE-2005-4012

Multiple cross-site scripting XSS vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via 1 the lastnumber parameter to stat.php and 2 the HTTP referer to pixel.php...

5.9AI score0.01851EPSS
SaveExploits1References10
CVE
CVE
•added 2005/12/01 11:00 a.m.•55 views

CVE-2005-3931

CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...

7.5CVSS8.8AI score0.01307EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2005/12/01 11:00 a.m.•36 views

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

8.4AI score0.01307EPSS
SaveExploits1References7
NVD
NVD
•added 2005/12/01 6:03 a.m.•27 views

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

7.5CVSS8.4AI score0.01307EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/01 12:00 a.m.•3 views

CVE-2005-3931: Undefined Security Weakness

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

7.5CVSS6.4AI score0.01307EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2005/09/23 12:00 a.m.•48 views

Land Down Under HTTP Referer Header SQL Injection

The installed version of Land Down Under fails to sanitize input passed through the HTTP Referer header before using it in database queries. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker can exploit this issue to manipulate database queries, possibly revealing sensitive...

6.8CVSS5.7AI score0.01126EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2005/07/13 12:00 a.m.•29 views

phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)

No description provided by source. // Original Author: 'Sjaak Rake' Ref: http://www.hackthissite.org/articles/read/175/ ?php $cookie = $GET'c'; $ip = getenv 'REMOTEADDR'; $date=date"j F, Y, g:i a"; $referer=getenv 'HTTPREFERER'; $fp = fopen'cookies.txt', 'a'; fwrite$fp, 'Cookie: '.$cookie.'br IP:...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/05/10 4:00 a.m.•40 views

CVE-2003-1186

Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header...

7.8AI score0.0385EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/10 12:00 a.m.•5 views

CVE-2003-1186: Undefined Security Weakness

Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header...

7.5CVSS6.5AI score0.0385EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2004/08/20 12:00 a.m.•17 views

Mozilla OnUnload Referer Information Leakage Race Condition Information Disclosure (deprecated)

Binary data 1316.prm...

2.6CVSS7.3AI score0.01523EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2004/07/06 12:00 a.m.•41 views

RHEL 2.1 : kdelibs (RHSA-2003:236)

This erratum provides updated KDE packages that resolve a security issue in Konquerer. KDE is a graphical desktop environment for the X Window System. Konqueror is the file manager for the K Desktop Environment. George Staikos reported that Konqueror may inadvertently send authentication...

5CVSS5.3AI score0.02899EPSS
SaveExploits0References4
CVE
CVE
•added 2004/03/18 5:00 a.m.•61 views

CVE-2004-0259

The CVE affects Formmail.php version 5.0 and earlier, where check_referer() can be bypassed by an empty or spoofed HTTP Referer, enabling access restriction bypass. The vulnerability is demonstrated via an application on the same web server that contains an associated cross-site scripting (XSS) i...

9.3CVSS6.2AI score0.02063EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
•added 2004/02/09 12:00 a.m.•43 views

formmail (PHP) Upload file using CSS

Informations : °°°°°°°°°°°°°° Website : http://www.dtheatre.com/scripts/ Version : all Problem : Upload file PHP Code/Location : °°°°°°°°°°°°°°°°°°° formmail.php : ------------------------------------------------------------------ function checkreferer$referers if count$referers $found = false;...

0.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2004/01/26 12:00 a.m.•20 views

Antologic Antolinux 1.0 - Administrative Interface NDCR Remote Command Execution

Antologic Antolinux 1.0 - Administrative Interface NDCR Remote Command Execution source: https://www.securityfocus.com/bid/9495/info It has been reported that Antologic Antolinux may be prone to a remote command execution vulnerability that may allow an attacker to execute arbitrary commands with...

0.2AI score
SaveExploits0
NVD
NVD
•added 2003/10/29 5:00 a.m.•32 views

CVE-2003-1186

Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header...

7.5CVSS7.8AI score0.0385EPSS
SaveExploits1References4
exploitpack
exploitpack
•added 2003/10/29 12:00 a.m.•23 views

TelCondex SimpleWebserver 2.12.30210 build 3285 - HTTP Referer Remote Buffer Overflow

TelCondex SimpleWebserver 2.12.30210 build 3285 - HTTP Referer Remote Buffer Overflow source: https://www.securityfocus.com/bid/8925/info A vulnerability has been reported in SimpleWebServer that may allow a remote attacker to cause a denial of service condition or execute arbitrary code on...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2003/10/29 12:00 a.m.•28 views

TelCondex SimpleWebserver 2.12.30210 build 3285 - HTTP Referer Remote Buffer Overflow

source: https://www.securityfocus.com/bid/8925/info A vulnerability has been reported in SimpleWebServer that may allow a remote attacker to cause a denial of service condition or execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by softwar...

5.8AI score
SaveExploits0
NVD
NVD
•added 2003/08/27 4:00 a.m.•34 views

CVE-2003-0459

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites...

5CVSS6.7AI score0.02899EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2003/08/11 7:50 a.m.•11 views

Moderate: Red Hat Security Advisory: : Updated KDE packages fix security issue

This erratum provides updated KDE packages that resolve a security issue in Konquerer. KDE is a graphical desktop environment for the X Window System. Konqueror is the file manager for the K Desktop Environment. George Staikos reported that Konqueror may inadvertently send authentication...

5CVSS5.8AI score0.02899EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2003/08/01 4:00 a.m.•51 views

CVE-2003-0459

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites...

6.5AI score0.02899EPSS
SaveExploits0References10
Rows per page
Query Builder