CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5699 matches found

Positive Technologies•added 2007/01/16 12:0 a.m.•3 views

PT-2007-1215 · Portix · Portix-Php

Name of the Vulnerable Software and Affected Versions: Portix-PHP version 0.4.2 Description: The issue allows remote attackers to execute arbitrary SQL commands via the username and passwd fields in the login component. Recommendations: For Portix-PHP version 0.4.2, update to a version that fixes...

7.5CVSS8.4AI score0.01096EPSS

Exploits0References6

OSV•added 2007/01/09 12:28 a.m.•1 views

DEBIAN-CVE-2007-0107

WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7...

6.8CVSS8.7AI score0.07357EPSS

Exploits1References1

Positive Technologies•added 2006/11/24 12:0 a.m.•3 views

PT-2006-6735 · Baal · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited through...

7.5CVSS8.1AI score0.01423EPSS

Exploits1References9

Positive Technologies•added 2006/06/05 12:0 a.m.•3 views

PT-2006-3745 · X Cart · X-Cart

Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...

9.8CVSS8.5AI score0.01305EPSS

Exploits0References6

Positive Technologies•added 2005/12/22 12:0 a.m.•4 views

PT-2005-5169 · Quantum Art · Quantum Art Qp7.Enterprise

Name of the Vulnerable Software and Affected Versions: Quantum Art QP7.Enterprise affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p news id parameter to API endpoints such as "news and events...

7.5CVSS8.6AI score0.01172EPSS

Exploits1References7

Positive Technologies•added 2005/05/28 12:0 a.m.•2 views

PT-2005-2772 · Os4E · Unknown Product

Name of the Vulnerable Software and Affected Versions: Unknown product by Online Solutions for Educators OS4E affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This could potentially le...

7.5CVSS7.7AI score0.0112EPSS

Exploits0References6

Positive Technologies•added 2005/05/25 12:0 a.m.•5 views

PT-2005-2722 · Ezdwc · Ezdwc Newsletterez

Name of the Vulnerable Software and Affected Versions: ezdwc NewsletterEz version 3.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "login.asp" file. Recommendations: For ezdwc NewsletterEz version 3.0, conside...

7.5CVSS7.9AI score0.0133EPSS

Exploits1References5

Positive Technologies•added 2005/02/17 12:0 a.m.•3 views

PT-2005-1332 · Biborb · Biborb

Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the Username or Password variables. Recommendations: For BibORB versions 1.3.2 and earlier, update to...

7.5CVSS7.6AI score0.01863EPSS

Exploits2References7