Lucene search
K

7210 matches found

seebug.org
seebug.org
added 2009/08/18 12:0 a.m.20 views

phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : [email protected]...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2009/08/18 12:0 a.m.31 views

phpfreeBB 1.0 - Blind SQL Injection

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : Download :...

7.4AI score
Exploits0
Prion
Prion
added 2009/08/17 4:30 p.m.9 views

Sql injection

SQL injection vulnerability in the Permis comgroups component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

7.5CVSS8.8AI score0.01063EPSS
Exploits1References2
Prion
Prion
added 2009/08/17 4:30 p.m.12 views

Sql injection

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

7.5CVSS9.1AI score0.00993EPSS
Exploits1References3
Cvelist
Cvelist
added 2009/08/17 4:0 p.m.18 views

CVE-2009-2779

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

8.3AI score0.00993EPSS
Exploits1References3
CVE
CVE
added 2009/08/17 4:0 p.m.45 views

CVE-2009-2779

CVE-2009-2779 affects AJ Matrix DNA, specifically the web entry point in index.php . The vulnerability arises in the productdetail action where an attacker can supply a crafted id parameter to trigger an SQL injection, enabling remote execution of arbitrary SQL commands. The issue is confirmed ac...

7.5CVSS8.7AI score0.00993EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2009/08/12 10:30 a.m.15 views

CVE-2008-6956

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

6.5CVSS6.9AI score0.04807EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/08/12 10:0 a.m.24 views

CVE-2008-6956

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

6.9AI score0.04807EPSS
Exploits0References4
NVD
NVD
added 2009/08/11 9:0 p.m.16 views

CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

5CVSS6.8AI score0.02672EPSS
Exploits1References3
Cvelist
Cvelist
added 2009/08/11 8:25 p.m.27 views

CVE-2008-6933

Directory traversal vulnerability in index.php in MiniGal b13 aka MG2 allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. dot dot in the list parameter...

6.8AI score0.02672EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2009/08/10 12:0 a.m.20 views

FaqRing 3.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || FaqRing 3.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://faqsystems.com/index.shtml Greetings : Mizoz, Zuka,...

0.1AI score
Exploits0
Prion
Prion
added 2009/08/06 5:30 p.m.27 views

Sql injection

Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, as accessible from a form generated by index.php...

6.8CVSS9.3AI score0.00914EPSS
Exploits1References4Affected Software1
Prion
Prion
added 2009/08/06 5:30 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username...

4.3CVSS6.1AI score0.01445EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2009/08/06 5:0 p.m.54 views

CVE-2008-6905

CVE-2008-6905 affects BabbleBoard 1.1.6, with a CSRF vulnerability in index.php. The issue allows remote authenticated users to hijack administrator authentication to perform admin-page actions such as deleting categories or groups, banning users, or deleting users. Root cause details and explici...

6CVSS6.9AI score0.00817EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2009/08/06 5:0 p.m.55 views

CVE-2008-6906

CVE-2008-6906 describes a cross-site scripting (XSS) vulnerability in BabbleBoard 1.1.6, specifically in the index.php file where an attacker can inject arbitrary web script or HTML via the username parameter. The issue is categorized with a low‑to‑moderate impact (CVSSv2 base score 4.3, MEDIUM) ...

4.3CVSS5.9AI score0.01445EPSS
Exploits1References3Affected Software1
seebug.org
seebug.org
added 2009/08/05 12:0 a.m.29 views

In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability

No description provided by source. @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author : Angela Chang Contact ...

7.1AI score
Exploits0
NVD
NVD
added 2009/07/28 7:30 p.m.14 views

CVE-2009-2642

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...

7.5CVSS6.9AI score0.02421EPSS
Exploits0References1
CVE
CVE
added 2009/07/28 7:6 p.m.40 views

CVE-2009-2642

The CVE-2009-2642 issue affects Desi Short URL Script 1.0, where index.php allows remote attackers to bypass authentication by tampering with cookies: set logged=1 and uid= (example 13). This indicates insufficient server-side validation of session cookies, enabling partial integrity and confiden...

7.5CVSS7.1AI score0.02421EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2009/07/28 12:0 a.m.22 views

Shop Script Cross Site Scripting

® -SHOP-SCRIPT XSS Remote Vulnerabilities- Script : shop-script premium Language : php Web Site : http://www.shop-script.com Autor : u.f. Thanks to : Jason, bull, T0r3x, Clark, Meth0d and all members r1zen.org Exploit Info Vuln is : /index.php? http://www.localhost.com/index.php?searchstring=XSS...

Exploits0
NVD
NVD
added 2009/07/27 2:30 p.m.18 views

CVE-2009-2601

SQL injection vulnerability in the Joomlaequipment aka JUser or comjuser component 2.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showprofile action to index.php...

7.5CVSS8.3AI score0.00928EPSS
Exploits0References2
Rows per page
Query Builder