Lucene search
+L

536 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/05 12:00 a.m.•4 views

CVE-2009-0424: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sign1.php in AN Guestbook ANG before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in 1 administrator/manage.php or 2 administrator/trash.php. NOTE: some of these details are...

4.3CVSS6AI score0.01065EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2008/10/09 12:00 a.m.•18 views

Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability

No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2008/09/04 12:00 a.m.•34 views

FreeBSD Ports: horde, horde-php5

The remote host is missing an update to the system as announced in the referenced advisory. VID 396ee517-a607-11d9-ac72-000bdb1444a4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

4.3CVSS6.5AI score0.01235EPSS
SaveExploits0
NVD
NVD
•added 2008/08/27 11:41 p.m.•19 views

CVE-2008-3847

Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.01033EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2008/08/27 11:00 p.m.•32 views

CVE-2008-3847

Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.8AI score0.01033EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/08/27 12:00 a.m.•4 views

CVE-2008-3847: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.01033EPSS
SaveExploits0References2
NVD
NVD
•added 2008/05/22 1:09 p.m.•23 views

CVE-2008-2414

Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

4.3CVSS5.7AI score0.01446EPSS
SaveExploits1References3
CVE
CVE
•added 2008/05/22 10:00 a.m.•53 views

CVE-2008-2414

The CVE-2008-2414 entry describes a Cross-Site Scripting (XSS) vulnerability in AN Guestbook (ANG) 0.4, specifically in send_email.php. The issue allows remote attackers to inject arbitrary web script or HTML via the postid parameter, implying an input/output handling flaw that potentially enable...

4.3CVSS6AI score0.01446EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2008/05/22 10:00 a.m.•30 views

CVE-2008-2414

Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

5.7AI score0.01446EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/22 12:00 a.m.•4 views

CVE-2008-2414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

4.3CVSS5.9AI score0.01446EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2008/05/16 12:00 a.m.•16 views

AN Guestbook 0.4 - send_email.php Cross-Site Scripting

AN Guestbook 0.4 - sendemail.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/05/16 12:00 a.m.•29 views

AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

4.3CVSS5.8AI score0.01446EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/31 12:00 a.m.•8 views

CVE-2002-2378: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon : in the query string, which is inserted into the resulting error page...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References2
Prion
Prion
•added 2007/01/30 6:28 p.m.•18 views

Remote file inclusion

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.5CVSS8AI score0.02836EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2007/01/30 6:00 p.m.•36 views

CVE-2007-0591

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.5AI score0.02836EPSS
SaveExploits1References5
CVE
CVE
•added 2007/01/30 6:00 p.m.•57 views

CVE-2007-0591

CVE-2007-0591 describes a PHP remote file inclusion in Vu Le An Virtual Path (VirtualPath) 1.0. The vulnerability occurs in configure.php via the phpbb_root_path parameter, enabling remote PHP code execution. Documents do not specify affected versions beyond 1.0, impact details beyond the describ...

7.5CVSS6.6AI score0.02836EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/30 12:00 a.m.•3 views

CVE-2007-0591: Undefined Security Weakness

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.5CVSS6.4AI score0.02836EPSS
SaveExploits1References1
myhack58
myhack58
•added 2006/09/03 12:00 a.m.•24 views

Create your own simple Backdoor-vulnerability warning-the black bar safety net

We all know nc is a powerful and flexible hacking tools, he can do many things, such as a telnet client port, such as the invasion of time to bounce back the shell, such as scanning...... But have you ever wondered will he build into a service-level Backdoor? Now much better with me as the rookie...

7.3AI score
SaveExploits0
NVD
NVD
•added 2006/02/15 12:02 a.m.•27 views

CVE-2006-0680

Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...

5CVSS6.4AI score0.01351EPSS
SaveExploits0References5
myhack58
myhack58
•added 2005/12/22 12:00 a.m.•24 views

The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net

The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. (As if in to it for advertising。。。。 Oh that we today refer to...

SaveExploits0
Rows per page
Query Builder