Lucene search
+L

1679 matches found

Prion
Prion
added 2007/03/22 11:19 p.m.25 views

Sql injection

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

5CVSS7.2AI score0.02334EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2007/03/22 11:19 p.m.24 views

CVE-2007-1607

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

5CVSS6.6AI score0.02334EPSS
SaveExploits1References6
NVD
NVD
added 2007/03/22 11:19 p.m.20 views

CVE-2007-1606

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

4.3CVSS5.8AI score0.02001EPSS
SaveExploits3References8
Prion
Prion
added 2007/03/22 11:19 p.m.20 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

4.3CVSS6AI score0.02001EPSS
SaveExploits3References8Affected Software1
Cvelist
Cvelist
added 2007/03/22 11:0 p.m.32 views

CVE-2007-1607

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

6.6AI score0.02334EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2007/03/22 11:0 p.m.28 views

CVE-2007-1606

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

5.8AI score0.02001EPSS
SaveExploits3References8
NVD
NVD
added 2007/03/20 10:19 p.m.22 views

CVE-2007-1551

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

4.3CVSS5.8AI score0.01528EPSS
SaveExploits0References9
Prion
Prion
added 2007/03/20 10:19 p.m.18 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

4.3CVSS6AI score0.01528EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2007/03/20 10:0 p.m.27 views

CVE-2007-1551

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

5.8AI score0.01528EPSS
SaveExploits0References9
NVD
NVD
added 2007/03/13 1:19 a.m.18 views

CVE-2007-1428

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

7.5CVSS8.4AI score0.01216EPSS
SaveExploits1References5
Prion
Prion
added 2007/03/13 1:19 a.m.16 views

Sql injection

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

7.5CVSS9.1AI score0.01216EPSS
SaveExploits1References5Affected Software1
seebug.org
seebug.org
added 2007/03/12 12:0 a.m.107 views

JobSitePro 1.0 (search.php) Remote SQL Injection Exploit

No description provided by source. //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/03/11 12:0 a.m.12 views

JobSitePro 1.0 - search.php SQL Injection

JobSitePro 1.0 - search.php SQL Injection //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page...

SaveExploits0
Exploit DB
Exploit DB
added 2007/03/11 12:0 a.m.26 views

JobSitePro 1.0 - 'search.php' SQL Injection

//Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://phplabs.com/ //'$$ : 39.95 $...

7.5CVSS5.8AI score0.01216EPSS
SaveExploits1
Prion
Prion
added 2007/02/26 5:28 p.m.19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

4.3CVSS5.8AI score0.0192EPSS
SaveExploits1References7Affected Software1
CVE
CVE
added 2007/02/24 1:0 a.m.45 views

CVE-2006-7057

Technical details (affected versions, root cause nuances, and remediation) are not provided in the supplied connected documents. Monitor for updates from official advisories.

7.5CVSS7.9AI score0.01001EPSS
SaveExploits0References2Affected Software1
xssed
xssed
added 2007/02/15 12:0 a.m.14 views

Unfixed XSS vulnerability at www.bilinmeyen.com

Security researcher amele2, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.bilinmeyen.com, which at the time of submission ranked 320097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is...

6.6AI score
SaveExploits0References1
exploitpack
exploitpack
added 2007/02/15 12:0 a.m.16 views

Calendar Express - search.php Cross-Site Scripting

Calendar Express - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

0.1AI score
SaveExploits0
myhack58
myhack58
added 2007/02/13 12:0 a.m.21 views

ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net

ipb search.php vulnerability analysis and thinking A vulnerability model may unearth a batch of vulnerabilities Idea is the most important pregreplace+/e Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerabilit...

0.8AI score
SaveExploits0
Prion
Prion
added 2007/02/03 1:28 a.m.15 views

Sql injection

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

6.5CVSS8.5AI score0.00894EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder