Lucene search
+L

636 matches found

Packet Storm
Packet Storm
added 2009/08/26 12:00 a.m.18 views

VideoGirls BiZ Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || VideoGirls BiZ Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.videogirls.biz/ Greetings : Mizoz, Zuka,...

7.4AI score
SaveExploits0
CVE
CVE
added 2009/08/24 10:00 a.m.49 views

CVE-2008-7052

CVE-2008-7052 describes an unrestricted file upload flaw in profile.php of the Pre Projects Pre Real Estate Listings application. The vulnerability allows remote authenticated users to upload a file with an executable extension as a profile logo and later access it directly via the re_images/ pat...

6.5CVSS7.5AI score0.03289EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2009/08/24 10:00 a.m.23 views

CVE-2008-7052

Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in reimages/...

7.3AI score0.03289EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2009/08/23 12:00 a.m.24 views

WordPress Simple Forum Plugin - SQL Injection

Because of this vulnerability in ahah/sf-profile.php, the attackers can execute arbitrary SQL commands via the "u" parameter. Solution Update the plugin...

7.5CVSS6.7AI score0.02797EPSS
SaveExploits2References1Affected Software1
Packet Storm
Packet Storm
added 2009/07/17 12:00 a.m.21 views

WebLeague 2.2.0 SQL Injection

DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...

SaveExploits0
zdt
zdt
added 2009/07/15 12:00 a.m.28 views

WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= WebLeague 2.2.0 profile.php SQL Injection Vulnerability ========================================================= DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/07/15 12:00 a.m.28 views

WebLeague 2.2.0 - profile.php SQL Injection

WebLeague 2.2.0 - profile.php SQL Injection DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT:...

SaveExploits0
Exploit DB
Exploit DB
added 2009/07/15 12:00 a.m.31 views

WebLeague 2.2.0 - 'profile.php' SQL Injection

DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...

7.5CVSS5.8AI score0.00928EPSS
SaveExploits1
Prion
Prion
added 2009/07/10 5:30 p.m.14 views

Sql injection

SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...

7.5CVSS9.1AI score0.00949EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2009/07/10 5:00 p.m.36 views

CVE-2009-2427

SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...

8.4AI score0.00949EPSS
SaveExploits2References2
Packet Storm
Packet Storm
added 2009/07/10 12:00 a.m.27 views

MyMsg 1.0.3 SQL Injection

MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE Site...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2009/07/10 12:00 a.m.20 views

MyMsg 1.0.3 (uid) Remote SQL Injection Vulnerability

No description provided by source. MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On Th...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/07/10 12:00 a.m.22 views

MyMsg 1.0.3 - uid SQL Injection

MyMsg 1.0.3 - uid SQL Injection MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/10 12:00 a.m.39 views

MyMsg 1.0.3 - 'uid' SQL Injection

MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE Site...

6.5CVSS5.8AI score0.00855EPSS
SaveExploits2
Prion
Prion
added 2009/07/08 3:30 p.m.17 views

Sql injection

SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum SMF allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are...

7.5CVSS9AI score0.00971EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2009/06/08 7:30 p.m.21 views

CVE-2009-2010

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 thread parameter to messageboard.php, 2 member parameter to profile.php, 3 pid parameter to gallery/index.php, and the 4...

6.5CVSS8.1AI score0.00902EPSS
SaveExploits2References5
seebug.org
seebug.org
added 2009/05/27 12:00 a.m.38 views

Mole Adult Portal Script (profile.php user_id) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/05/26 12:00 a.m.22 views

Mole Adult Portal Script - profile.php?user_id SQL Injection

Mole Adult Portal Script - profile.php?userid SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO:...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/05/26 12:00 a.m.41 views

Mole Adult Portal Script - 'profile.php?user_id' SQL Injection

|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

7.5CVSS5.8AI score0.01011EPSS
SaveExploits2
Prion
Prion
added 2009/05/15 3:30 p.m.16 views

Authentication flaw

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

6.4CVSS7.4AI score0.02247EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder