Lucene search
K

5 matches found

OSV
OSV
added 2019/02/04 7:29 p.m.1 views

DEBIAN-CVE-2019-7345

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'options' options.php does no input validation for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php...

4.8CVSS8.1AI score0.00235EPSS
Exploits1References1
OSV
OSV
added 2019/02/04 7:29 p.m.0 views

UBUNTU-CVE-2019-7345

Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'options' options.php does no input validation for the WEBTITLE, HOMEURL, HOMECONTENT, or WEBCONSOLEBANNER value, allowing an attacker to execute HTML or JavaScript code. This relates to functions.php...

4.8CVSS6.8AI score0.00235EPSS
Exploits1References3
OSV
OSV
added 2018/12/26 9:29 p.m.2 views

CVE-2018-11741

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=&GOTO8 URIs...

9.8CVSS5.8AI score0.48139EPSS
Exploits5References4
0day.today
0day.today
added 2012/01/30 12:0 a.m.11 views

phux Download Manager Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2008/06/18 12:0 a.m.19 views

Comparison Engine Power 1.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl useLWP::UserAgent; useGetopt::Long; if!$ARGV1 print"\n"; print"VIVAISLAMEVIVAISLAME\n"; print"VIVAISLAMEVIVAISLAME\n"; print"\n"; print"ComparisonEnginePower1.0BlindSQLInjectionExploit\n"; print"&...

7.1AI score
Exploits0
Rows per page
Query Builder