Lucene search
K

291 matches found

Prion
Prion
added 2007/04/03 12:19 a.m.10 views

Sql injection

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01276EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2007/04/03 12:0 a.m.16 views

CVE-2007-1838

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01276EPSS
Exploits1References5
seebug.org
seebug.org
added 2007/03/28 12:0 a.m.28 views

XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: Xoops Module Friendfinder = 3.3 view.php id BLIND SQL Injection Exploit Coded by : ajann Author : ajann Dork : "inurl:/modules/friendfinder/" Contact : : S.Page : http://www.xoops.org/ $$ : Free .. : ajann,Turkey use IO::Socket; if@AR...

7.1AI score
Exploits0
NVD
NVD
added 2007/03/23 12:19 a.m.15 views

CVE-2007-1613

Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the logi parameter...

7.5CVSS7.1AI score0.07551EPSS
Exploits1References5
seebug.org
seebug.org
added 2007/03/17 12:0 a.m.21 views

MPM Chat 2.5 (view.php logi) Local File Include Vulnerability

No description provided by source. MPM Chat 2.5 view.php logi Local File Include Exploit D.Script: http://mpm.pahviloota.net/mpmchat25.zip Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code ?php if $logi != '' include...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2007/03/17 12:0 a.m.64 views

MPM Chat 2.5 (view.php logi) Local File Include Exploit

MPM Chat 2.5 view.php logi Local File Include Exploit D.Script: http://mpm.pahviloota.net/mpmchat25.zip Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code ?php if $logi != '' include 'archive/' . $logi; Exploit:...

Exploits0
NVD
NVD
added 2007/03/02 9:18 p.m.10 views

CVE-2007-1147

PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath parameter...

7.5CVSS7.5AI score0.00764EPSS
Exploits0References3
Prion
Prion
added 2007/03/02 9:18 p.m.13 views

Remote file inclusion

PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath parameter...

7.5CVSS8AI score0.00764EPSS
Exploits0References3
Cvelist
Cvelist
added 2007/02/27 6:0 p.m.18 views

CVE-2007-1147

PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath parameter...

7.5AI score0.00764EPSS
Exploits0References3
securityvulns
securityvulns
added 2007/02/23 12:0 a.m.100 views

Hasadya Raed

Remote Incluude File : By Hasadya Raed Contact : [email protected] Author : Hasadya Raed Script : arabhost Download : http://delmaa.com/upfile/users/arabHost.zip B.File : function.php V.Code : include$adminfloder"; Expl : http://www.victim.com/path/function.php?adminfolder=Shell-Attack...

0.5AI score
Exploits0
NVD
NVD
added 2007/02/21 11:28 a.m.9 views

CVE-2007-1026

SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information...

7.5CVSS8.3AI score0.03024EPSS
Exploits0References8
Cvelist
Cvelist
added 2007/02/21 11:0 a.m.16 views

CVE-2007-1026

SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information...

8.3AI score0.03024EPSS
Exploits0References8
CVE
CVE
added 2007/02/21 11:0 a.m.36 views

CVE-2007-1026

CVE-2007-1026 is a SQL injection in XLAtunes prior to or including 0.1, exploitable via the album parameter in view mode. The underlying issue is improper handling of user-supplied input in view.php, allowing remote attackers to craft arbitrary SQL commands (injections) with network access. The p...

7.5CVSS8.3AI score0.03024EPSS
Exploits0References8Affected Software1
0day.today
0day.today
added 2007/02/15 12:0 a.m.28 views

ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ZebraFeeds 1.0 zfpath Remote File Include Vulnerabilities ============================================================ Discovered By:- ThE email protected aggregator.php:-...

7.1AI score
Exploits0
Prion
Prion
added 2007/02/06 7:28 p.m.12 views

Sql injection

SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9AI score0.01673EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2007/02/06 7:28 p.m.11 views

CVE-2007-0786

SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01673EPSS
Exploits0References6
exploitpack
exploitpack
added 2007/02/03 12:0 a.m.10 views

Photo Galerie Standard 1.1 - view.php SQL Injection

Photo Galerie Standard 1.1 - view.php SQL Injection Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=S...

0.8AI score
Exploits0
NVD
NVD
added 2006/11/06 11:7 p.m.9 views

CVE-2006-5768

Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to 1 msg/view.php, 2 msg/incmessage.php, 3 msg/incenvoi.php, and 4 admin/inclvoircompet.php...

7.5CVSS7.6AI score0.13889EPSS
Exploits1References11
securityvulns
securityvulns
added 2006/06/30 12:0 a.m.57 views

AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection

================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /gentemsn/view.php?l=ar&id=SQL ================================ Email:[email protected]...

2.2AI score
Exploits0
NVD
NVD
added 2006/06/29 9:5 p.m.9 views

CVE-2006-3115

SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raidid parameter...

5.1CVSS8.4AI score0.00487EPSS
Exploits0References3
Rows per page
Query Builder