Lucene search
+L

37 matches found

Exploit DB
Exploit DB
•added 2011/02/23 12:00 a.m.•23 views

ProQuiz 2.0.0b - Arbitrary File Upload

Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/02/22 12:00 a.m.•30 views

ProQuiz 2 Shell Upload

------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release Date............2/20/2011 Tested On...............Windows Vista + XAMPP...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/03/13 12:00 a.m.•30 views

ProQuiz 'Username' and 'Password' Parameters SQL Injection Vulnerability

ProQuiz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

7.1AI score
SaveExploits0References1
NVD
NVD
•added 2009/02/27 11:30 a.m.•23 views

CVE-2008-6312

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS8.2AI score0.01103EPSS
SaveExploits2References3
Prion
Prion
•added 2009/02/27 11:30 a.m.•22 views

Sql injection

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

7.5CVSS8.8AI score0.01103EPSS
SaveExploits2References3Affected Software1
Prion
Prion
•added 2009/02/27 11:30 a.m.•22 views

Sql injection

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS8.7AI score0.01103EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2009/02/27 11:00 a.m.•31 views

CVE-2008-6327

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

8.3AI score0.00999EPSS
SaveExploits1References3
CVE
CVE
•added 2009/02/27 11:00 a.m.•64 views

CVE-2008-6327

ProQuiz 1.0 is affected by an SQL injection in index.php via the password parameter (CVE-2008-6327). The OpenVAS entry confirms the vulnerability is due to insufficient sanitization of user input in the SQL query, enabling remote execution of arbitrary SQL commands. This vector is distinct from C...

7.5CVSS8.7AI score0.00999EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2009/02/27 11:00 a.m.•36 views

CVE-2008-6312

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.2AI score0.01103EPSS
SaveExploits2References3
CVE
CVE
•added 2009/02/27 11:00 a.m.•55 views

CVE-2008-6312

ProQuiz 1.0 is affected by an SQL injection in index.php. The CVE-2008-6312 vector is via the username parameter, caused by insufficient input sanitization. OpenVAS also documents a related vector (password parameter) for CVE-2008-6327. Both entries indicate remote code execution potential throug...

7.5CVSS8.6AI score0.01103EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/27 12:00 a.m.•6 views

CVE-2008-6327: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter, a different vector than CVE-2008-6312...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/27 12:00 a.m.•3 views

CVE-2008-6312: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS6.4AI score0.01103EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2008/12/10 12:00 a.m.•20 views

ProQuiz 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------------------------------------------------------------------- 0 GENERAL DETAILS: Name : ProQuiz 1.0 Sql Injection Auth bypass Download :...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/12/09 12:00 a.m.•32 views

ProQuiz 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== ProQuiz 1.0 Auth Bypass SQL Injection Vulnerability =====================================================...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/12/09 12:00 a.m.•34 views

ProQuiz 1.0 SQL Injection

---------------------------------------------------------------------------------------------------------------------------------------------------------------- 0 GENERAL DETAILS: Name : ProQuiz 1.0 Sql Injection Auth bypass Download :...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/12/09 12:00 a.m.•28 views

ProQuiz 1.0 - Authentication Bypass

ProQuiz 1.0 - Authentication Bypass ---------------------------------------------------------------------------------------------------------------------------------------------------------------- 0 GENERAL DETAILS: Name : ProQuiz 1.0 Sql Injection Auth bypass Download :...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/12/09 12:00 a.m.•30 views

ProQuiz 1.0 - Authentication Bypass

---------------------------------------------------------------------------------------------------------------------------------------------------------------- 0 GENERAL DETAILS: Name : ProQuiz 1.0 Sql Injection Auth bypass Download :...

7.5CVSS5.8AI score0.01103EPSS
SaveExploits2
Rows per page
Query Builder