Lucene search
+L

5379 matches found

CVE
CVE
•added 2008/10/07 12:00 a.m.•62 views

CVE-2008-4465

Vulnerability details (CVE-2008-4465) identify a SQL injection in the Vastal I-Tech DVD Zone, affecting the view_mags.php component via the cat_id parameter. The issue arises from unsanitized input that allows remote attackers to inject arbitrary SQL commands, potentially impacting data confident...

7.5CVSS8.2AI score0.01006EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2008/10/07 12:00 a.m.•76 views

CVE-2008-4461

CVE-2008-4461 affects Vastal I-Tech Dating Zone (likely version 0.9.9). The vulnerability is an SQL injection in the advanced_search_results.php script allowing an attacker to manipulate the fage parameter to execute arbitrary SQL commands. This enables remote exploitation with potential impact o...

7.5CVSS10AI score0.00997EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2008/10/07 12:00 a.m.•36 views

CVE-2008-4466

SQL injection vulnerability in viewproductscat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.4AI score0.0101EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•3 views

CVE-2008-4462: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.php in Vastal I-Tech Visa Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•4 views

CVE-2008-4460: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the gameid parameter...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•3 views

CVE-2008-4463: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•2 views

CVE-2008-4469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...

7.5CVSS6.4AI score0.01042EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•2 views

CVE-2008-4464: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewmags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/07 12:00 a.m.•3 views

CVE-2008-4461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...

7.5CVSS8.6AI score0.00997EPSS
SaveExploits2References2
CVE
CVE
•added 2008/10/07 12:00 a.m.•64 views

CVE-2008-4462

CVE-2008-4462 affects the Vastal I-Tech Visa Zone web application, specifically a SQL injection in the view_news.php component via the news_id parameter. The underlying cause is improper handling of input leading to arbitrary SQL execution by remote attackers, with potential partial integrity/con...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2008/10/07 12:00 a.m.•68 views

CVE-2008-4469

CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...

7.5CVSS8.4AI score0.01042EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2008/10/07 12:00 a.m.•33 views

CVE-2008-4469

SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...

8.4AI score0.01042EPSS
SaveExploits1References5
seebug.org
seebug.org
•added 2008/09/29 12:00 a.m.•71 views

Arcadem Pro (articlecat) Remote SQL Injection Vulnerability

No description provided by source. || | | Arcadem Pro articlecat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

7.1AI score
SaveExploits0
Saint
Saint
•added 2008/09/24 12:00 a.m.•27 views

DNS zone transfer

Added: 09/24/2008 CVE: CVE-1999-0532 OSVDB: 492 Background A DNS zone transfer is the process by which a secondary name server copies all DNS records for a domain from a primary name server. Problem If DNS zone transfers are not restricted, they can allow attackers to enumerate hosts in a domain...

6.2AI score0.69255EPSS
SaveExploits7
Saint
Saint
•added 2008/09/24 12:00 a.m.•30 views

DNS zone transfer

Added: 09/24/2008 CVE: CVE-1999-0532 OSVDB: 492 Background A DNS zone transfer is the process by which a secondary name server copies all DNS records for a domain from a primary name server. Problem If DNS zone transfers are not restricted, they can allow attackers to enumerate hosts in a domain...

6.2AI score0.69255EPSS
SaveExploits7
Saint
Saint
•added 2008/09/24 12:00 a.m.•44 views

DNS zone transfer

Added: 09/24/2008 CVE: CVE-1999-0532 OSVDB: 492 Background A DNS zone transfer is the process by which a secondary name server copies all DNS records for a domain from a primary name server. Problem If DNS zone transfers are not restricted, they can allow attackers to enumerate hosts in a domain...

6.2AI score0.69255EPSS
SaveExploits7
Saint
Saint
•added 2008/09/24 12:00 a.m.•55 views

DNS zone transfer

Added: 09/24/2008 CVE: CVE-1999-0532 OSVDB: 492 Background A DNS zone transfer is the process by which a secondary name server copies all DNS records for a domain from a primary name server. Problem If DNS zone transfers are not restricted, they can allow attackers to enumerate hosts in a domain...

6.2AI score0.69255EPSS
SaveExploits7
NVD
NVD
•added 2008/09/11 1:13 a.m.•27 views

CVE-2008-3953

SQL injection vulnerability in keywordsearchaction.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter...

7.5CVSS8.4AI score0.0101EPSS
SaveExploits1References4
NVD
NVD
•added 2008/09/11 1:13 a.m.•26 views

CVE-2008-3951

SQL injection vulnerability in viewann.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the annid parameter...

7.5CVSS10AI score0.01051EPSS
SaveExploits1References4
Prion
Prion
•added 2008/09/11 1:13 a.m.•21 views

Sql injection

SQL injection vulnerability in keywordsearchaction.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter...

7.5CVSS9.1AI score0.0101EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder