Lucene search
+L

292 matches found

exploitpack
exploitpack
added 2008/04/11 12:0 a.m.14 views

PHPAddressBook 2.11 - view.php SQL Injection

PHPAddressBook 2.11 - view.php SQL Injection phpAddressBook Remote Sql İnj. Vuln. Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip Version : All My Version Founder: Cr@zyKing HomePage: http://coderx.org Greatz : str0ke & All My Friends Contact: [email protected] PoC:...

1AI score
SaveExploits0
NVD
NVD
added 2008/04/02 5:44 p.m.21 views

CVE-2008-1621

Multiple cross-site scripting XSS vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 show.php, 2 search.php, and 3 view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3CVSS5.7AI score0.01476EPSS
SaveExploits4References3
CVE
CVE
added 2008/03/26 5:0 p.m.53 views

CVE-2003-1555

ScozNet ScozBook 1.1 BETA is affected by a vulnerability in view.php where an invalid PG parameter triggers an error message that reveals the installation path, causing information disclosure. Affected component: ScozBook web frontend (view.php). Root cause: improper handling of the PG parameter ...

5CVSS6.2AI score0.03109EPSS
SaveExploits2References6Affected Software1
UbuntuCve
UbuntuCve
added 2008/02/14 11:0 p.m.29 views

CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

4.3CVSS5.9AI score0.05246EPSS
SaveExploits3References1
Prion
Prion
added 2008/01/23 12:0 p.m.16 views

Sql injection

Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to comments.php and 2 an unspecified parameter to view.php...

6.8CVSS9.3AI score0.00979EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2008/01/15 8:0 p.m.14 views

CVE-2008-0268

Cross-site scripting XSS vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

4.3CVSS5.7AI score0.01513EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2008/01/15 7:0 p.m.19 views

CVE-2008-0268

Cross-site scripting XSS vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

5.7AI score0.01513EPSS
SaveExploits2References5
Prion
Prion
added 2008/01/03 10:46 p.m.23 views

Cross site scripting

Cross-site scripting XSS vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bugreport.php...

4.3CVSS5.7AI score0.01745EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
added 2008/01/03 10:0 p.m.33 views

CVE-2007-6611

Cross-site scripting XSS vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML via a filename, related to bugreport.php...

5.3AI score0.01745EPSS
SaveExploits0References13
Prion
Prion
added 2007/12/28 12:46 a.m.19 views

Sql injection

Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to 1 comments.php, 2 view.php, 3 siteadmin/ViewItem.php, and unspecified other vectors...

7.5CVSS9.3AI score0.02252EPSS
SaveExploits2References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/12/27 12:0 a.m.16 views

Mantis < 0.9.5 / 1.1.0 RC5 view.php HTML Injection

Binary data 4326.prm...

4.3CVSS7.3AI score0.01745EPSS
SaveExploits0References3
Prion
Prion
added 2007/12/21 7:46 p.m.24 views

Directory traversal

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F dot dot slash in the list parameter...

7.5CVSS7.2AI score0.02886EPSS
SaveExploits2References6Affected Software1
NVD
NVD
added 2007/12/21 7:46 p.m.20 views

CVE-2007-6508

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F dot dot slash in the list parameter...

7.5CVSS6.7AI score0.02886EPSS
SaveExploits2References6
CVE
CVE
added 2007/12/21 7:0 p.m.53 views

CVE-2007-6508

CVE-2007-6508 is a directory traversal vulnerability in xeCMS 1.0 (view.php) that allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter. The entry is supported by multiple sources (NVD, CVE List) with a CVSS v2 base score of 7.5 (HIGH) and network attac...

7.5CVSS6.7AI score0.02886EPSS
SaveExploits2References6Affected Software1
securityvulns
securityvulns
added 2007/12/20 12:0 a.m.111 views

xeCMS 1.x.x Remote File Disclosure Vulnerability.

-------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected] exploit : view.php?list=..2F..2F...

0.6AI score
SaveExploits0
exploitpack
exploitpack
added 2007/12/19 12:0 a.m.43 views

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/12/19 12:0 a.m.50 views

xeCMS 1.x - 'view.php' Remote File Disclosure

-------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected] exploit : view.php?list=..%2F..%2F...

7.5CVSS5.8AI score0.02886EPSS
SaveExploits2
zdt
zdt
added 2007/12/19 12:0 a.m.80 views

xeCMS 1.x (view.php list) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== xeCMS 1.x view.php list Remote File Disclosure Vulnerability ==============================================================...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2007/09/21 12:0 a.m.28 views

webed-rfi.txt

--------------------------------------------------------------- Multiple Remote File Inclusion Vulnerability --------------------------------------------------------------- Founded by : Seph1roth Download Script: http://sourceforge.net/projects/ed-engine/ WebED-0.8999.tar.gz Exploit:...

7.4AI score
SaveExploits0
CVE
CVE
added 2007/04/18 10:0 a.m.65 views

CVE-2007-2084

CVE-2007-2084 affects MobilePublisherphp version 1.1.2 and is described as a PHP remote file inclusion vulnerability in the admin directory. The issue permits an attacker to supply a URL in the auth_method parameter to any of the admin PHP files (index.php, list.php, postreview.php, reindex.php, ...

6.8CVSS7.6AI score0.01405EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder