CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.8AI score0.01275EPSS

Exploits1References1

RedhatCVE•added 2025/05/22 1:50 a.m.•9 views

CVE-2011-5176

Multiple cross-site scripting XSS vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 q or 2 category parameter...

4.3CVSS6.1AI score0.00931EPSS

Exploits0References1

RedhatCVE•added 2025/05/22 12:47 a.m.•7 views

CVE-2011-5175

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter...

7.5CVSS8.9AI score0.01311EPSS

Exploits1References1

Packet Storm•added 2015/01/19 12:0 a.m.•48 views

Banana Dance Wiki CMS b2.x LFI / SQL Injection

Document Title: =============== Banana Dance Wiki CMS b2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1407 Release Date: ============= 2015-01-16 Vulnerability Laboratory ID VL-ID: ====================================...

0.4AI score

Exploits0

Vulnerability Lab•added 2015/01/16 12:0 a.m.•26 views

Banana Dance Wiki CMS b2.x - Multiple Web Vulnerabilities

7.1AI score

Exploits0

ATTACKERKB•added 2014/10/21 2:55 p.m.•3 views

CVE-2012-5242

Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter in a gettemplate action...

6.8CVSS5.9AI score0.02537EPSS

Exploits5References3

ATTACKERKB•added 2014/10/21 2:55 p.m.•4 views

CVE-2012-5243

functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request...

5CVSS5.7AI score0.02761EPSS

Exploits5References3

CVE•added 2014/10/21 2:0 p.m.•57 views

CVE-2012-5243

Banana Dance B.2.6 and earlier are affected by CVE-2012-5243 (Improper Access Control). An unauthenticated remote attacker can read arbitrary data from the database via /functions/suggest.php, enabling reading of sensitive information (bd_users table per PoC). The issue is part of a set of vulner...

5CVSS6.3AI score0.02761EPSS

Exploits5References2Affected Software1

CVE•added 2014/10/21 2:0 p.m.•58 views

CVE-2012-5242

Banana Dance (Product: Banana Dance; Vendor: bananadance.org) is affected by CVE-2012-5242 and related issues in B.2.6 and earlier. The root causes include: PHP File Inclusion in functions/ajax.php/get_template flow and Directory Traversal via name parameter in get_template action; Improper Acces...

6.8CVSS7AI score0.02537EPSS

Exploits5References2Affected Software1

NVD•added 2014/10/20 2:55 p.m.•21 views

CVE-2012-5244

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 return, 2 display, 3 table, or 4 search parameter to functions/suggest.php; 5 the id parameter to functions/widgets.php, 6 the category parameter to...

7.5CVSS8.4AI score0.015EPSS

Exploits5References7

ATTACKERKB•added 2014/10/20 2:55 p.m.•5 views

CVE-2012-5244

7.5CVSS6.3AI score0.015EPSS

Exploits5References8

Prion•added 2014/10/20 2:55 p.m.•21 views

Sql injection

7.5CVSS9.1AI score0.015EPSS

Exploits5References7Affected Software1

CVE•added 2014/10/20 2:0 p.m.•52 views

CVE-2012-5244

Banana Dance is affected by CVE-2012-5244 and likely earlier, affecting version B.2.6 and prior. The advisory bundle shows multiple vulnerabilities in Banana Dance (Banana Dance is a PHP/MySQL app): (1) SQL Injection in /functions/suggest.php (parameters return, display, table, search), (2) SQL I...

7.5CVSS8.5AI score0.015EPSS

Exploits5References7Affected Software1