Lucene search
+L

166 matches found

exploitpack
exploitpack
•added 2011/12/07 12:00 a.m.•16 views

PHP City Portal Script Software - SQL Injection

PHP City Portal Script Software - SQL Injection Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/12/07 12:00 a.m.•36 views

PHP City Portal Script 1.1 SQL Injection

Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker may execute arbitrary SQL statements on the...

0.4AI score
SaveExploits0
Prion
Prion
•added 2010/06/28 8:30 p.m.•26 views

Sql injection

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS9.1AI score0.00961EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2010/06/28 8:00 p.m.•81 views

CVE-2010-2508

CVE-2010-2508 describes a SQL injection in the 2daybiz Video Community Portal Script, specifically in the file user-profile.php, where the userid parameter can be manipulated by an attacker to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD, Red Hat ad...

7.5CVSS8.7AI score0.00961EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/28 12:00 a.m.•12 views

CVE-2010-2508: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2010/06/26 12:00 a.m.•31 views

2daybiz B2B Portal Script SQL Injection

Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============ EXPL0!T...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/06/26 12:00 a.m.•43 views

2daybiz B2B Portal Script SQL Injection

Exploit Title: 2daybiz B2B Portal Script Sql Injection Date: 25/06/2010 Author: r45c4l Email: r45c4lathotmaildotcom Site : www.garage4hackers.com Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

0.4AI score
SaveExploits0
NVD
NVD
•added 2010/06/25 9:30 p.m.•30 views

CVE-2010-2458

Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...

4.3CVSS5.7AI score0.0172EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2010/06/25 9:00 p.m.•38 views

CVE-2010-2459

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

8.4AI score0.00997EPSS
SaveExploits2References5
CVE
CVE
•added 2010/06/25 9:00 p.m.•87 views

CVE-2010-2458

CVE-2010-2458 is an XSS vulnerability in the 2daybiz Video Community Portal Script 1.0, exploitable via the videoid parameter in video.php. The root cause is unsanitized input leading to arbitrary script execution if an attacker injects HTML/script. Public references describe the vulnerability an...

4.3CVSS5.9AI score0.0172EPSS
SaveExploits2References6Affected Software1
CVE
CVE
•added 2010/06/25 9:00 p.m.•71 views

CVE-2010-2459

CVE-2010-2459 describes an SQL injection in the file video.php of the product 2daybiz Video Community Portal Script 1.0 . The vulnerability is triggered via the videoid parameter, allowing remote attackers to execute arbitrary SQL commands. According to NVD, the CVSS v2 vector is AV:N/AC:L/Au:N/C...

7.5CVSS8.7AI score0.00997EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/25 12:00 a.m.•8 views

CVE-2010-2458: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...

4.3CVSS6AI score0.0172EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/25 12:00 a.m.•10 views

CVE-2010-2459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

7.5CVSS6.4AI score0.00997EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2010/06/24 12:00 a.m.•23 views

2DayBiz B2B Portal Script - SQL Injection

2DayBiz B2B Portal Script - SQL Injection Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : =================Exploit================== EXPL0!T...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/06/24 12:00 a.m.•42 views

2DayBiz B2B Portal Script - SQL Injection

Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : =================Exploit================== EXPL0!T http://server/path/companyinfo.php?id=83SQL...

5.3AI score
SaveExploits0
NVD
NVD
•added 2010/04/29 5:30 p.m.•22 views

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

6.8CVSS8.6AI score0.00914EPSS
SaveExploits2References4
Prion
Prion
•added 2010/04/29 5:30 p.m.•19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...

4.3CVSS6.1AI score0.01445EPSS
SaveExploits2References3
CVE
CVE
•added 2010/04/29 5:00 p.m.•55 views

CVE-2010-1606

CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...

4.3CVSS5.9AI score0.01445EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2010/04/29 5:00 p.m.•59 views

CVE-2010-1605

CVE-2010-1605 affects isearch.php in the NCT Jobs Portal Script, where SQL injection is possible through the anyword and cityname parameters. The underlying issue is likely improper input handling allowing malicious SQL to be executed by remote attackers, with the NVD entry citing a base score of...

7.5CVSS8.5AI score0.01001EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2010/04/29 5:00 p.m.•31 views

CVE-2010-1604

Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...

8.6AI score0.00914EPSS
SaveExploits2References4
Rows per page
Query Builder