Lucene search
+L

9769 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/11 12:00 a.m.•8 views

CVE-2009-4892: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

7.5CVSS6.4AI score0.00907EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/09 12:00 a.m.•9 views

CVE-2010-2254: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2010/06/02 7:00 p.m.•33 views

CVE-2010-2139

SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

8.1AI score0.01685EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2010/06/02 7:00 p.m.•32 views

CVE-2010-2142

SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.02031EPSS
SaveExploits2References3
Prion
Prion
•added 2010/06/02 6:30 p.m.•26 views

Sql injection

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

7.5CVSS8.7AI score0.02508EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2010/06/02 6:14 p.m.•37 views

CVE-2010-2133

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

8.2AI score0.02045EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/02 12:00 a.m.•6 views

CVE-2010-2133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

7.5CVSS6.4AI score0.02045EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/02 12:00 a.m.•8 views

CVE-2010-2142: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.02031EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/02 12:00 a.m.•8 views

CVE-2010-2139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS6.5AI score0.01685EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2010/06/01 9:00 p.m.•38 views

CVE-2010-2124

SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.0199EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/01 12:00 a.m.•8 views

CVE-2010-2124: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.0199EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/27 12:00 a.m.•12 views

CVE-2010-2091: Improper Neutralization of Input During Web Page Generation

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

4.3CVSS5.7AI score0.17939EPSS
SaveExploits2References2
NVD
NVD
•added 2010/05/25 6:30 p.m.•23 views

CVE-2010-2051

SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00973EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2010/05/25 6:00 p.m.•36 views

CVE-2010-2051

SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00973EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/25 12:00 a.m.•7 views

CVE-2010-2051: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2010/05/24 5:30 p.m.•6 views

CVE-2010-2016

SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via the pid parameter...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/24 12:00 a.m.•7 views

CVE-2010-2015: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in a viewinbox action to cp/cpmessages.php or 2 the id parameter to cp/editemail.php...

6.8CVSS6.4AI score0.00903EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/24 12:00 a.m.•6 views

CVE-2010-2013: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS6AI score0.01062EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2010/05/24 12:00 a.m.•30 views

Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure

Microsoft Outlook Web Access OWA 8.2.254.0 - Information Disclosure $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "Microsoft Outlook Web Access OWA version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information...

7.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/24 12:00 a.m.•5 views

CVE-2010-2014: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cp/listcontent.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter...

4.3CVSS6AI score0.00871EPSS
SaveExploits1References2
Rows per page
Query Builder