Lucene search
+L

7400 matches found

Cvelist
Cvelist
•added 2009/05/07 5:00 p.m.•38 views

CVE-2008-6796

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...

8.4AI score0.00973EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/07 12:00 a.m.•4 views

CVE-2008-6798: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/07 12:00 a.m.•4 views

CVE-2008-6796: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2009/04/01 12:00 a.m.•26 views

Community CMS 0.5 Multiple SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: Community CMS + Version: 0.5 + Website: http://sourceforge.net/projects/communitycms/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Dork: intext:"Powered by Community CMS" + Date: 30 Mar 2009 +...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2009/03/27 7:32 p.m.•16 views

Security projects aim for Google Summer of Code

By Robert Lemos, SecurityFocus A number of security-focused open-source projects have announced their participation as mentoring organizations in Google’s Summer of Code google.com. They include the NMap Project, the OpenSSH project and the Honeynet Project. Read the full article securityfocus.co...

0.7AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2009/02/24 12:00 a.m.•36 views

Fedora Update for hsqldb FEDORA-2007-4119

Check for the Version of hsqldb OpenVAS Vulnerability Test Fedora Update for hsqldb FEDORA-2007-4119 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

9.3CVSS8AI score0.14284EPSS
SaveExploits3References2
Prion
Prion
•added 2009/02/20 11:30 p.m.•26 views

Sql injection

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01003EPSS
SaveExploits2References5
NVD
NVD
•added 2009/02/20 11:30 p.m.•30 views

CVE-2008-6226

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...

6.8CVSS8.4AI score0.00942EPSS
SaveExploits2References5
CVE
CVE
•added 2009/02/20 11:00 p.m.•61 views

CVE-2008-6226

CVE-2008-6226 affects the Pre Projects PHP Auto Listings Script, specifically the moreinfo.php handler. The root cause is a SQL injection vulnerability in the itemno parameter when magic_quotes_gpc is disabled, allowing remote attackers to modify or execute arbitrary SQL commands. The available c...

6.8CVSS8.8AI score0.00942EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2009/02/20 11:00 p.m.•43 views

CVE-2008-6226

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...

8.4AI score0.00942EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2009/02/20 11:00 p.m.•36 views

CVE-2008-6230

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01003EPSS
SaveExploits2References5
CVE
CVE
•added 2009/02/20 11:00 p.m.•78 views

CVE-2008-6230

CVE-2008-6230 affects the Pre Projects Pre Podcast Portal (Tour.php). The vulnerability is an SQL injection via the id parameter that enables remote attackers to execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (NETWORK, LOW attack complexity, NONE authentication, PARTIAL impacts ...

7.5CVSS8.7AI score0.01003EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/20 12:00 a.m.•7 views

CVE-2008-6230: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01003EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/20 12:00 a.m.•6 views

CVE-2008-6226: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the itemno parameter...

6.8CVSS6.4AI score0.00942EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•44 views

Fedora Update for trac FEDORA-2008-6830

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2008-6830 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5.8CVSS0.1AI score0.01834EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•35 views

Fedora Update for bugzilla FEDORA-2008-3668

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2008-3668 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

4.3CVSS6.4AI score0.01349EPSS
SaveExploits1References2
NVD
NVD
•added 2009/01/29 6:30 p.m.•26 views

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

5CVSS6.4AI score0.07294EPSS
SaveExploits1References3
CVE
CVE
•added 2009/01/29 6:09 p.m.•66 views

CVE-2009-0324

CVE-2009-0324 describes multiple SQL injection vulnerabilities in BibCiter 1.4. The affected components are the PHP scripts reports/projects.php (parameter idp), reports/contacts.php (parameter idc), and reports/users.php (parameter idu). The root cause is unsanitized input leading to arbitrary S...

7.5CVSS8.8AI score0.01168EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2009/01/29 6:09 p.m.•57 views

CVE-2009-0328

CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...

5CVSS6.6AI score0.07294EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2009/01/29 6:09 p.m.•32 views

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

6.4AI score0.07294EPSS
SaveExploits1References3
Rows per page
Query Builder