Lucene search
+L

9763 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/23 12:00 a.m.•4 views

CVE-2008-4709: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/23 12:00 a.m.•6 views

CVE-2008-4705: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in successstory.php in php Online Dating Software MyPHPDating allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00997EPSS
SaveExploits2References2
Prion
Prion
•added 2008/10/22 10:30 a.m.•22 views

Sql injection

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

7.5CVSS9.1AI score0.01145EPSS
SaveExploits2References6
NVD
NVD
•added 2008/10/22 12:11 a.m.•22 views

CVE-2008-4653

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS8.4AI score0.01003EPSS
SaveExploits2References5
Prion
Prion
•added 2008/10/22 12:11 a.m.•21 views

Sql injection

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS9AI score0.01003EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/22 12:00 a.m.•5 views

CVE-2008-4665: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

7.5CVSS6.4AI score0.01145EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•5 views

CVE-2008-4653: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS6.5AI score0.01003EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•6 views

CVE-2008-4642: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

7.5CVSS6.4AI score0.01003EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/20 12:00 a.m.•5 views

CVE-2008-4617: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Prion
Prion
•added 2008/10/18 12:18 a.m.•23 views

Sql injection

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...

7.5CVSS9.1AI score0.01003EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/17 12:00 a.m.•8 views

CVE-2008-4605: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...

7.5CVSS6.4AI score0.01003EPSS
SaveExploits2References2
Prion
Prion
•added 2008/10/09 6:14 p.m.•22 views

Sql injection

SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.0101EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/09 12:00 a.m.•6 views

CVE-2008-4528: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

7.5CVSS6.3AI score0.02551EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/09 12:00 a.m.•5 views

CVE-2008-4517: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits1References2
NVD
NVD
•added 2008/10/08 2:00 a.m.•28 views

CVE-2008-4488

Cross-site scripting XSS vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/08 12:00 a.m.•6 views

CVE-2008-4494: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01003EPSS
SaveExploits2References2
NVD
NVD
•added 2008/10/07 12:31 a.m.•35 views

CVE-2008-4468

SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3
Prion
Prion
•added 2008/10/07 12:31 a.m.•25 views

Sql injection

SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01006EPSS
SaveExploits1References3
Prion
Prion
•added 2008/10/07 12:31 a.m.•23 views

Sql injection

SQL injection vulnerability in showseriesink.php in Vastal I-Tech Toner Cart allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•8 views

CVE-2008-4468: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
Rows per page
Query Builder