Lucene search
+L

7242 matches found

Prion
Prion
added 2007/11/20 8:46 p.m.24 views

Sql injection

Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 codes action in the profile-codes module, 2 videos action in the video-codes module, or 3 games action in the arcade-games module...

7.5CVSS9.3AI score0.01229EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2007/11/20 8:46 p.m.22 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

6.8CVSS7.5AI score0.05785EPSS
SaveExploits1References7
CVE
CVE
added 2007/11/20 8:00 p.m.51 views

CVE-2007-6058

ProfileCMS 1.0 and earlier contains multiple SQL injection flaws in index.php. The id parameter in three actions (profile-codes, video-codes, arcade-games) is exploitable, enabling remote attackers to execute arbitrary SQL via normal requests. The vulnerability is documented across multiple sourc...

7.5CVSS8.5AI score0.01229EPSS
SaveExploits1References7Affected Software1
seebug.org
seebug.org
added 2007/11/18 12:00 a.m.22 views

meBiblio 0.4.5 (index.php action) Remote File Inclusion Vulnerability

No description provided by source. meBiblio 0.4.5 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download :...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/11/17 12:00 a.m.21 views

meBiblio 0.4.5 (index.php action) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== meBiblio 0.4.5 index.php action Remote File Inclusion Vulnerability ===================================================================== meBiblio 0.4.5 RFI...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/11/17 12:00 a.m.19 views

meBiblio 0.4.5 - action Remote File Inclusion

meBiblio 0.4.5 - action Remote File Inclusion meBiblio 0.4.5 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download :...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/11/17 12:00 a.m.49 views

meBiblio 0.4.5 - 'action' Remote File Inclusion

meBiblio 0.4.5 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&bigmirror=0 --------------------...

9.3CVSS5.8AI score0.04597EPSS
SaveExploits1
Exploit DB
Exploit DB
added 2007/11/16 12:00 a.m.33 views

Myspace Clone Script - 'index.php' Remote File Inclusion

|S n I p E r - S A . C o m| SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR RR S NN NN NN II PP P EE RR R SS NN NN NN II PPPPPPP EE RR RR SSSS NN NN NN II PPP EEEEEEE RRRR SS NN NN NN II PP EE RRRR S NN NN NN II PP EE RR RR SS NN NNN II PP EE RR RR SSSSS NN NNN II PP EEEEEEEEEE ...

6.8CVSS5.8AI score0.05785EPSS
SaveExploits1
NVD
NVD
added 2007/11/15 10:46 p.m.23 views

CVE-2007-6001

Multiple cross-site scripting XSS vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 func or 2 date parameter, or the jid parameter in a 3 log or 4 user action, a different vulnerability than CVE-2007-3910...

4.3CVSS5.6AI score0.02031EPSS
SaveExploits1References3
Prion
Prion
added 2007/11/15 10:46 p.m.14 views

Sql injection

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

7.5CVSS9AI score0.01133EPSS
SaveExploits2References4
Prion
Prion
added 2007/11/15 10:46 p.m.14 views

Sql injection

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

7.5CVSS9.2AI score0.01006EPSS
SaveExploits1References4Affected Software1
Prion
Prion
added 2007/11/15 10:46 p.m.16 views

Sql injection

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action...

7.5CVSS9AI score0.01063EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2007/11/15 10:00 p.m.47 views

CVE-2007-5991

CVE-2007-5991 affects ExoPHPdesk: SQL injection in index.php via the user parameter in the profile fn action, enabling remote execution of arbitrary SQL commands. Documented in NVD with a base score of 7.5 (HIGH); attack vector is network and no authentication required. Connected sources also ref...

7.5CVSS8.3AI score0.01063EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2007/11/15 10:00 p.m.28 views

CVE-2007-6004

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

8.5AI score0.01006EPSS
SaveExploits1References4
NVD
NVD
added 2007/11/15 12:46 a.m.18 views

CVE-2007-5982

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

4.3CVSS5.9AI score0.03053EPSS
SaveExploits3References5
Prion
Prion
added 2007/11/15 12:46 a.m.12 views

Sql injection

SQL injection vulnerability in index.php in TBSource, as used in 1 TBDev and 2 TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information...

6.5CVSS8.6AI score0.0107EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2007/11/15 12:46 a.m.27 views

CVE-2007-5975

SQL injection vulnerability in index.php in TBSource, as used in 1 TBDev and 2 TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information...

6.5CVSS7.9AI score0.0107EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2007/11/15 12:00 a.m.30 views

CVE-2007-5984

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service CPU and memory consumption via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."...

6.7AI score0.08451EPSS
SaveExploits1References6
Prion
Prion
added 2007/11/14 1:46 a.m.23 views

Design/Logic Flaw

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

4CVSS6.7AI score0.0089EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2007/11/14 1:46 a.m.21 views

CVE-2007-5942

Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with 1 a certain func parameter value; or 2 certain func, jid, page, and limit parameter values; which reveals the path in various error messages...

4CVSS6.2AI score0.0089EPSS
SaveExploits0References2
Rows per page
Query Builder