Lucene search
+L

5495 matches found

seebug.org
seebug.org
•added 2007/03/12 12:00 a.m.•26 views

HC Newssystem 1.0-1.4 (index.php ID) Remote SQL Injection Vulnerability

No description provided by source. HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/03/12 12:00 a.m.•13 views

BP Blog 7.0 - layout SQL Injection

BP Blog 7.0 - layout SQL Injection BeyazKurt Script : BP Blog D0rk : "Powered by BP Blog 7.0" thnx : Forever.slam and all WorldHackerz Team! WorldHackerz Mirr0r'da Taht Bizimdir h := ------- Exploit :...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/03/12 12:00 a.m.•27 views

BP Blog 7.0 - 'layout' SQL Injection

BeyazKurt Script : BP Blog D0rk : "Powered by BP Blog 7.0" thnx : Forever.slam and all WorldHackerz Team! WorldHackerz Mirr0r'da Taht Bizimdir h := ------- Exploit :...

7.5CVSS5.8AI score0.01115EPSS
SaveExploits1
exploitpack
exploitpack
•added 2007/03/10 12:00 a.m.•19 views

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL...

SaveExploits0
securityvulns
securityvulns
•added 2007/03/10 12:00 a.m.•64 views

HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection

HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj Code : Admin Username/Password Query...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/03/10 12:00 a.m.•49 views

HC Newssystem 1.0-1.4 - 'index.php?ID' SQL Injection

HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj Code : Admin Username/Password Query...

7.5CVSS5.8AI score0.01241EPSS
SaveExploits2
zdt
zdt
•added 2007/03/10 12:00 a.m.•101 views

HC Newssystem 1.0-1.4 (index.php ID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= HC Newssystem 1.0-1.4 index.php ID Remote SQL Injection Vulnerability ======================================================================= HC NEWSSYSTEM 1.0-4...

7.1AI score
SaveExploits0
OSV
OSV
•added 2007/03/03 7:19 p.m.•15 views

DEBIAN-CVE-2007-1244

Cross-site request forgery CSRF vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting X...

6.8CVSS6.2AI score0.07544EPSS
SaveExploits2References1
Patchstack
Patchstack
•added 2007/03/03 12:00 a.m.•34 views

WordPress Admin Panel Plugin <= 2.1.1 - CSRF

Because of this vulnerability, the attackers can perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. Solution Update the WordPress Admin Panel plugin to the latest version at least 2.1.2...

6.8CVSS5.7AI score0.07544EPSS
SaveExploits2References1Affected Software1
NVD
NVD
•added 2007/01/30 6:28 p.m.•23 views

CVE-2007-0592

Cross-site scripting XSS vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database...

6.8CVSS5.7AI score0.01393EPSS
SaveExploits0References6
Prion
Prion
•added 2007/01/30 6:28 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database...

6.8CVSS6.1AI score0.01393EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2007/01/30 6:00 p.m.•38 views

CVE-2007-0592

Cross-site scripting XSS vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database...

5.7AI score0.01393EPSS
SaveExploits0References6
CVE
CVE
•added 2007/01/30 6:00 p.m.•65 views

CVE-2007-0592

CVE-2007-0592 is an XSS vulnerability in EzDatabase 2.1.3. The affected component is EzDatabase’s admin/login.php and the Admin Panel Database, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry indicates a CVSSv2 base score of 6.8 (Medium) wit...

6.8CVSS5.7AI score0.01393EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/30 12:00 a.m.•5 views

CVE-2007-0592: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database...

6.8CVSS6.1AI score0.01393EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/01/28 12:00 a.m.•51 views

PHP Membership Manager Cross-Site Scripting Vulnerability

PHP Membership Manager Cross-Site Scripting Vulnerability PHP Membership Manager is a browser based tool which allows a site owner to easily manage an unlimited number of username / password accounts and groups which access secure, protected areas of a web site which require logging in before...

1.5AI score
SaveExploits0
Prion
Prion
•added 2007/01/22 6:28 p.m.•27 views

Sql injection

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

7.5CVSS9AI score0.01152EPSS
SaveExploits0References5
NVD
NVD
•added 2007/01/22 6:28 p.m.•22 views

CVE-2007-0403

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

7.5CVSS8.4AI score0.01152EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2007/01/22 6:00 p.m.•36 views

CVE-2007-0403

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

8.4AI score0.01152EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2007/01/22 6:00 p.m.•35 views

CVE-2007-0402

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...

5.7AI score0.01199EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2007/01/11 2:00 a.m.•38 views

CVE-2007-0191

Cross-site scripting XSS vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contentsnew operation in the adcontents section...

5.7AI score0.01199EPSS
SaveExploits0References4
Rows per page
Query Builder