Lucene search
+L

246 matches found

zdt
zdt
added 2011/08/17 12:00 a.m.34 views

Code Widget Pop-Over Login Form (ASP) Authentication Bypass

Exploit for asp platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2011/08/16 12:00 a.m.54 views

Code Widgets Pop-Over Login Form SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 inj3ct0r 1337 Day Team 1 0 0...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2011/05/13 12:00 a.m.46 views

Web File Browser 0.4b14 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SaveExploits0
zdt
zdt
added 2011/05/13 12:00 a.m.53 views

Web File Browser 0.4b14 => File[Shell]upload / Information Disclosure

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2011/02/28 12:00 a.m.11 views

Google Chrome Uninitialized bug_report Pointer Code Execution (CVE-2011-0479)

Google Chrome is a web browser developed by Google Inc. It provides a rich web browsing experience similar to other web browsers such as Firefox, Opera, and Internet Explorer. A remote code execution vulnerability has been reported in Google Chrome. The vulnerability is due to accessing an...

7.5CVSS7.1AI score0.01611EPSS
SaveExploits0
Prion
Prion
added 2009/05/01 4:30 p.m.21 views

Improper access control

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

5CVSS6.9AI score0.02329EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2009/05/01 4:30 p.m.20 views

CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

5CVSS6.3AI score0.02329EPSS
SaveExploits1References2
CVE
CVE
added 2009/05/01 4:00 p.m.52 views

CVE-2009-1495

CVE-2009-1495 affects Web File Explorer 3.1. The vulnerability is due to improper access control that stores sensitive information under the web root, allowing remote attackers to download the database (data/db.mdb) via a direct request. Documented impact is exposure of the database file; no reme...

5CVSS6.5AI score0.02329EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2009/05/01 4:00 p.m.29 views

CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

6.3AI score0.02329EPSS
SaveExploits1References2
NVD
NVD
added 2009/04/17 2:08 p.m.22 views

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.02043EPSS
SaveExploits2References4
Prion
Prion
added 2009/04/17 2:08 p.m.19 views

Sql injection

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9AI score0.02043EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2009/04/17 10:00 a.m.54 views

CVE-2009-1323

CVE-2009-1323 describes an SQL injection in Web File Explorer 3.1, where body.asp fails to sanitize the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. This is triggered via the id parameter in the request, enabling potential data disclosure or modification o...

7.5CVSS8.7AI score0.02043EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2009/04/17 10:00 a.m.31 views

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.3AI score0.02043EPSS
SaveExploits2References4
Prion
Prion
added 2009/04/17 12:30 a.m.19 views

Code injection

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

10CVSS8.2AI score0.10149EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2009/04/17 12:30 a.m.30 views

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

10CVSS7.6AI score0.10149EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/04/17 12:00 a.m.31 views

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

7.6AI score0.10149EPSS
SaveExploits1References2
CVE
CVE
added 2009/04/17 12:00 a.m.50 views

CVE-2009-1314

The CVE-2009-1314 entry concerns body.asp in Web File Explorer 3.1, where the savefile action accepts a file parameter containing an executable extension, enabling remote attackers to create arbitrary files and execute arbitrary code. Affected component: Web File Explorer 3.1’s web interface (bod...

10CVSS7.8AI score0.10149EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2007/06/06 1:30 a.m.17 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

4.3CVSS5.7AI score0.01485EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2007/06/06 1:00 a.m.27 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

5.7AI score0.01485EPSS
SaveExploits2References4
CVE
CVE
added 2007/06/06 1:00 a.m.48 views

CVE-2007-3049

CVE-2007-3049 : In Buttercup Web File Manager (BWFM), the vulnerability is an XSS in index.php via the title parameter. The root cause is lack of input sanitization on the title field, allowing remote attackers to inject arbitrary web script/HTML. According to the NVD entry, the impact is partial...

4.3CVSS5.7AI score0.01485EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder