Lucene search
+L

928 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/29 12:00 a.m.•2 views

CVE-2005-3384: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

7.5CVSS6.4AI score0.01579EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/29 12:00 a.m.•2 views

CVE-2005-3383: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

7.5CVSS6.4AI score0.01579EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/29 12:00 a.m.•2 views

CVE-2005-3385: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

7.5CVSS6.4AI score0.01579EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/29 12:00 a.m.•2 views

CVE-2005-3386: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

7.5CVSS6.4AI score0.01631EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/14 12:00 a.m.•3 views

CVE-2005-3207: Undefined Security Weakness

The forms servlet f90servlet in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service TNS listener stop via a userid parameter that contains a STOP command...

5CVSS5.8AI score0.19832EPSS
SaveExploits2References1
NVD
NVD
•added 2005/09/21 10:03 p.m.•27 views

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

7.5CVSS8.5AI score0.01224EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2005/08/03 4:00 a.m.•38 views

CVE-2005-2441

Multiple cross-site scripting XSS vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the 1 UserName parameter to profile.php or 2 UserID parameter to login.php...

5.7AI score0.02121EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/03 12:00 a.m.•2 views

CVE-2005-2441: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the 1 UserName parameter to profile.php or 2 UserID parameter to login.php...

4.3CVSS5.9AI score0.02121EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/13 12:00 a.m.•2 views

CVE-2005-1096: Undefined Security Weakness

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter...

7.5CVSS6.5AI score0.01333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/26 12:00 a.m.•2 views

CVE-2005-0882: Undefined Security Weakness

SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 userpw parameters...

7.5CVSS6.4AI score0.01333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/07 12:00 a.m.•2 views

CVE-2005-0661: Undefined Security Weakness

SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 lastvisit cookie...

7.5CVSS6.4AI score0.01111EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2005/02/08 12:00 a.m.•14 views

MSN Messenger UserID Detection (deprecated)

Binary data 2600.prm...

7.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/02/06 5:00 a.m.•24 views

CVE-2005-0216

Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...

5.9AI score0.0125EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/06 12:00 a.m.•2 views

CVE-2005-0216: Undefined Security Weakness

Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...

4.3CVSS6AI score0.0125EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•37 views

CVE-2002-1264

Buffer overflow in Oracle iSQLPlus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL...

7.4AI score0.07724EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•3 views

CVE-2002-1264: Undefined Security Weakness

Buffer overflow in Oracle iSQLPlus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL...

7.5CVSS6.6AI score0.07724EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/03/18 12:00 a.m.•3 views

CVE-2004-0348: Undefined Security Weakness

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter...

10CVSS6.4AI score0.0331EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2003/06/25 12:00 a.m.•31 views

kerio563.txt

/ Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================================= / / By B-r00t ok rcpt to: [email protected] 550 5.1.1 Mailbox does not exist rcpt to:[email protected] 250 2.1.5 Recipient ok local ok local user fred seems to...

7.4AI score
SaveExploits0
NVD
NVD
•added 2002/12/31 5:00 a.m.•20 views

CVE-2002-2219

chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user userid field...

7.5CVSS6.5AI score0.06393EPSS
SaveExploits2References5
CVE
CVE
•added 2002/03/09 5:00 a.m.•69 views

CVE-2001-1016

The CVE-2001-1016 entry affects PGP Corporate Desktop < 7.1 , Personal Security < 7.0.3 , Freeware < 7.0.3 , and E-Business Server

7.5CVSS6.9AI score0.0136EPSS
SaveExploits0References5Affected Software5
Rows per page
Query Builder