Lucene search
+L

1346 matches found

Exploit DB
Exploit DB
•added 2009/08/20 12:00 a.m.•130 views

PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

7.5CVSS5.8AI score0.00993EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/20 12:00 a.m.•4 views

CVE-2009-2891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS6.4AI score0.00993EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/20 12:00 a.m.•4 views

CVE-2009-2887: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

4.3CVSS5.9AI score0.01097EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/20 12:00 a.m.•4 views

CVE-2009-2888: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter...

7.5CVSS6.4AI score0.00993EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2009/08/20 12:00 a.m.•18 views

PHP Scripts Now Riddles - riddlesresults.php?searchQuery Cross-Site Scripting

PHP Scripts Now Riddles - riddlesresults.php?searchQuery Cross-Site Scripting source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied...

0.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/20 12:00 a.m.•4 views

CVE-2009-2886: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter...

7.5CVSS6.4AI score0.01163EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/20 12:00 a.m.•5 views

CVE-2009-2890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

4.3CVSS5.9AI score0.03056EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2009/08/20 12:00 a.m.•20 views

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/08/20 12:00 a.m.•32 views

PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

4.3CVSS5.8AI score0.03056EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2009/07/21 12:00 a.m.•27 views

PHP Scripts Now Hangman - 'index.php?letters' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

4.3CVSS5.8AI score0.01498EPSS
SaveExploits2
exploitpack
exploitpack
•added 2009/07/21 12:00 a.m.•12 views

PHP Scripts Now Hangman - index.php?n SQL Injection

PHP Scripts Now Hangman - index.php?n SQL Injection source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues t...

0.6AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/07/20 12:00 a.m.•19 views

PHP Scripts Now (Multiple Products) - bios.php?rank SQL Injection

PHP Scripts Now Multiple Products - bios.php?rank SQL Injection source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this...

0.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/07/20 12:00 a.m.•21 views

PHP Scripts Now (Multiple Products) - bios.php?rank Cross-Site Scripting

PHP Scripts Now Multiple Products - bios.php?rank Cross-Site Scripting source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/07/20 12:00 a.m.•33 views

PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

7.5CVSS5.8AI score0.00993EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2009/07/20 12:00 a.m.•31 views

PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

4.3CVSS5.8AI score0.01498EPSS
SaveExploits2
Prion
Prion
•added 2009/04/08 10:30 a.m.•20 views

Authentication flaw

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

7.5CVSS7.8AI score0.02561EPSS
SaveExploits2References3
NVD
NVD
•added 2009/04/08 10:30 a.m.•35 views

CVE-2008-6667

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

7.5CVSS7.2AI score0.02561EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2009/04/08 10:00 a.m.•41 views

CVE-2008-6667

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

7.2AI score0.02561EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/08 12:00 a.m.•6 views

CVE-2008-6667: Improper Authentication

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

7.5CVSS5.9AI score0.02561EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2009/03/02 12:00 a.m.•31 views

pPIM Multiple Remote Vulnerabilities

This host is running pPIM. pPIM is an information manger that can hold contacts, events in a calendar, links, send emails, check email, store notes, and uploads files. pPIM is prone to multiple vulnerabilities, including two security-bypass issues, a cross-site scripting issue, and a file-upload...

8.8CVSS6.6AI score0.02972EPSS
SaveExploits3
Rows per page
Query Builder