Lucene search
+L

559 matches found

Exploit DB
Exploit DB
•added 2012/08/30 12:00 a.m.•30 views

XM Forum - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/55299/info XM Forum is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/08/30 12:00 a.m.•20 views

XM Forum - search.asp SQL Injection

XM Forum - search.asp SQL Injection source: https://www.securityfocus.com/bid/55299/info XM Forum is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

0.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/08/29 12:00 a.m.•55 views

ASP-DEv XM Forums RC 3 SQL Injection

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: ASP-DEv XM Forums RC 3 Remote Post Sql Injection Vulnerability Google Dork: Intext:"Powered by ASP-DEv XM Forums RC 3" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Download Link :...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/08/24 12:00 a.m.•37 views

Fedora Update for xen FEDORA-2012-11785

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-11785 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.4CVSS0.3AI score0.39835EPSS
SaveExploits9References2
Fedora
Fedora
•added 2012/08/21 9:48 a.m.•46 views

[SECURITY] Fedora 17 Update: xen-4.1.3-2.fc17

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.2CVSS2.1AI score0.39835EPSS
SaveExploits9
NVD
NVD
•added 2012/07/25 9:55 p.m.•23 views

CVE-2012-4061

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

7.5CVSS8.5AI score0.0123EPSS
SaveExploits1References2
NVD
NVD
•added 2012/07/25 9:55 p.m.•23 views

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

7.5CVSS8.5AI score0.01113EPSS
SaveExploits2References3
Prion
Prion
•added 2012/07/25 9:55 p.m.•24 views

Sql injection

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

7.5CVSS9.3AI score0.01113EPSS
SaveExploits2References3Affected Software1
Prion
Prion
•added 2012/07/25 9:55 p.m.•26 views

Sql injection

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

7.5CVSS9.3AI score0.0123EPSS
SaveExploits1References2
CVE
CVE
•added 2012/07/25 9:00 p.m.•53 views

CVE-2012-4061

ASP-DEv XM Diary is affected by SQL injection flaws in the diary_view.asp (id parameter) and default.asp (view_date parameter). The underlying issue allows remote attackers to craft input to cause arbitrary SQL execution, as summarized by CVE-2012-4061. The entry records a CVSS v2 base score of 7...

7.5CVSS8.8AI score0.0123EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2012/07/25 9:00 p.m.•32 views

CVE-2012-4061

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

8.5AI score0.0123EPSS
SaveExploits1References2
CVE
CVE
•added 2012/07/25 9:00 p.m.•54 views

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to profile.asp, forum.asp, or topic.asp. The connected records confirm the affected component and vectors, but no exploitation details or patch/remediation...

7.5CVSS8.8AI score0.01113EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2012/07/25 9:00 p.m.•35 views

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

8.5AI score0.01113EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/25 12:00 a.m.•6 views

CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

7.5CVSS6.4AI score0.01113EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/07/25 12:00 a.m.•4 views

CVE-2012-4061: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

7.5CVSS6.4AI score0.0123EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2012/06/28 12:00 a.m.•29 views

Fedora Update for xen FEDORA-2012-9430

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-9430 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

7.4CVSS0.3AI score0.39835EPSS
SaveExploits10References2
Packet Storm
Packet Storm
•added 2012/04/27 12:00 a.m.•21 views

ASP-DEv XM Diary SQL Injection

Exploit Title : ASP-DEv XM Diary SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.asp-dev.com/download.asp?did=2 Contact : [email protected] , [email protected] Security Ris...

1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/04/27 12:00 a.m.•41 views

XM Forum - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/53292/info XM Forum is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application...

7.5CVSS5.2AI score0.01113EPSS
SaveExploits2
exploitpack
exploitpack
•added 2012/04/27 12:00 a.m.•14 views

XM Forum - id Multiple SQL Injections

XM Forum - id Multiple SQL Injections source: https://www.securityfocus.com/bid/53292/info XM Forum is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/04/27 12:00 a.m.•32 views

ASP-DEv XM Forums SQL Injection

Exploit Title : ASP-DEv XM Forums SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.asp-dev.com/download.asp?did=1 Contact : [email protected] , [email protected] Security Ri...

0.7AI score
SaveExploits0
Rows per page
Query Builder