Lucene search
+L

26 matches found

exploitpack
exploitpack
added 2009/07/21 12:0 a.m.12 views

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/21 12:0 a.m.20 views

MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion

source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...

5.8AI score
SaveExploits0
NVD
NVD
added 2007/06/01 10:30 a.m.19 views

CVE-2007-2988

A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/createengine.php followed by a request to...

7.5CVSS6.8AI score0.07699EPSS
SaveExploits1References7
Prion
Prion
added 2007/06/01 10:30 a.m.15 views

Design/Logic Flaw

A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/createengine.php followed by a request to...

7.5CVSS7.4AI score0.07699EPSS
SaveExploits1References7
CVE
CVE
added 2007/06/01 10:0 a.m.54 views

CVE-2007-2988

The CVE-2007-2988 entry describes a vulnerability in the Inout Meta Search Engine: an admin script redirects the browser but does not exit when admin credentials are missing, enabling remote attackers to inject arbitrary PHP code via a sequence of requests to admin/create_engine.php and then admi...

7.5CVSS6.8AI score0.07699EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2007/06/01 10:0 a.m.24 views

CVE-2007-2988

A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/createengine.php followed by a request to...

6.8AI score0.07699EPSS
SaveExploits1References7
Rows per page
Query Builder