Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-5342

Malware in sbrugna...

7.5CVSS6.4AI score0.00897EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-1667

Malware in sbrugna...

7.5CVSS6.4AI score0.01048EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/11/10 12:0 a.m.3 views

PT-2024-16725 · Unknown · Amtt Hotel Broadband Operation System

Name of the Vulnerable Software and Affected Versions: AMTT Hotel Broadband Operation System versions up to 3.0.3.151204 Description: A critical issue has been found in the AMTT Hotel Broadband Operation System. It affects an unknown function of the file /manager/frontdesk/online status.php. The...

8.8CVSS6.9AI score0.00097EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/11/10 12:0 a.m.2 views

AMTT Hotel Broadband Operation System 注入漏洞

AMTT Hotel Broadband Operation System is a hotel broadband operation system from China's AmTech Century AMTT. An injection vulnerability exists in AMTT Hotel Broadband Operation System HiBOS 3.0.3.151204 and earlier versions, which originates from the parameter AccountID in the file...

8.8CVSS6.9AI score0.00097EPSS
Exploits1References4
OSV
OSV
added 2020/10/02 9:15 a.m.2 views

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

6.1CVSS6.4AI score0.00532EPSS
Exploits1References2
Prion
Prion
added 2020/10/02 9:15 a.m.13 views

Design/Logic Flaw

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

4.3CVSS6AI score0.00532EPSS
Exploits1References2Affected Software2
Cvelist
Cvelist
added 2020/10/02 8:34 a.m.13 views

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

6.1AI score0.00532EPSS
Exploits1References2
Prion
Prion
added 2015/06/08 2:59 p.m.15 views

Directory traversal

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...

5CVSS6.5AI score0.80831EPSS
Exploits7References5Affected Software1
Cvelist
Cvelist
added 2015/06/08 2:0 p.m.19 views

CVE-2015-2997

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...

6AI score0.80831EPSS
Exploits7References5
NVD
NVD
added 2009/08/03 2:30 p.m.9 views

CVE-2008-6889

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

7.5CVSS8.3AI score0.00355EPSS
Exploits1References5
Prion
Prion
added 2009/08/03 2:30 p.m.14 views

Sql injection

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

7.5CVSS9AI score0.00355EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2009/08/03 2:0 p.m.14 views

CVE-2008-6889

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

8.3AI score0.00355EPSS
Exploits1References5
CVE
CVE
added 2009/08/03 2:0 p.m.37 views

CVE-2008-6889

The CVE-2008-6889 entry describes an SQL injection vulnerability in Merchantsadd.asp of ASPReferral 5.3. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted AccountID parameter, enabling potential unauthorized access or data manipulation. The NVD metrics indi...

7.5CVSS8.7AI score0.00355EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2008/12/08 11:30 a.m.8 views

CVE-2008-5365

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

7.5CVSS8.4AI score0.00897EPSS
Exploits0References6
Prion
Prion
added 2008/12/08 11:30 a.m.8 views

Sql injection

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

7.5CVSS9.1AI score0.00897EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2008/12/08 11:0 a.m.14 views

CVE-2008-5365

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

8.4AI score0.00897EPSS
Exploits0References6
Rows per page
Query Builder