Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•5 views

CVE-2024-13067: Improper Access Control

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS5.2AI score0.00846EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/23 9:16 p.m.•27 views

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

5.4CVSS0.00544EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/23 12:00 a.m.•8 views

CVE-2022-30015: Improper Neutralization of Input During Web Page Generation

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

5.4CVSS6AI score0.00544EPSS
SaveExploits1References2
CVE
CVE
•added 2006/09/27 11:00 p.m.•62 views

CVE-2006-5017

CVE-2006-5017 corresponds to a SQL injection vulnerability in Szava Gyula and Csaba Tamas e-Vision CMS, affecting the admin/all_users.php component. The issue allows remote attackers to inject arbitrary SQL commands through the from parameter, enabling potential data disclosure or modification. P...

7.5CVSS8.8AI score0.01226EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/27 12:00 a.m.•11 views

CVE-2006-5017: Undefined Security Weakness

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...

7.5CVSS6.4AI score0.01226EPSS
SaveExploits2References1
seebug.org
seebug.org
•added 2006/09/22 12:00 a.m.•43 views

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / e-Vision CMS Remote sql injection exploit / By : HACKERS PAL / WwW.SoQoR.NeT / printr' // / e-Vision CMS Remote sql injection exploit / / by HACKERS PAL [email protected] / / site: http://www.soqor.net /'; if $argc2...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/09/22 12:00 a.m.•60 views

e-Vision CMS 2.0 - 'all_users.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+ User Name : "; pregreplacecallback'/\td...

7.5CVSS5.8AI score0.01226EPSS
SaveExploits2
exploitpack
exploitpack
•added 2006/09/22 12:00 a.m.•41 views

e-Vision CMS 2.0 - all_users.php SQL Injection

e-Vision CMS 2.0 - allusers.php SQL Injection !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+...

0.1AI score
SaveExploits0
Rows per page
Query Builder