Lucene search
+L

4077 matches found

securityvulns
securityvulns
•added 2006/09/06 12:00 a.m.•53 views

Easy Address Book Web Server format string vulnerability

Format string vulnerability on URI request parsing...

2.9AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2006/09/04 12:00 a.m.•16 views

Easy Address Book Web Server 1.2 - Remote Format String

Easy Address Book Web Server 1.2 - Remote Format String source: https://www.securityfocus.com/bid/19842/info Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the...

7.5AI score
SaveExploits0
NVD
NVD
•added 2006/08/10 12:04 a.m.•25 views

CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

7.5CVSS8.8AI score0.01496EPSS
SaveExploits0References8
CVE
CVE
•added 2006/08/10 12:00 a.m.•69 views

CVE-2006-4056

CVE-2006-4056 relates to multiple SQL injection vulnerabilities in the authentication process of the Address Book software: katzlbt (The Address Book 1.04e and earlier) and The Address Book Reloaded before 2.0-rc4. The flaw allows remote attackers to manipulate SQL via the (1) username or (2) pas...

7.5CVSS9.2AI score0.01496EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
•added 2006/08/10 12:00 a.m.•38 views

CVE-2006-4056

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

8.8AI score0.01496EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/10 12:00 a.m.•8 views

CVE-2006-4056: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...

7.5CVSS6.5AI score0.01496EPSS
SaveExploits0References1
NVD
NVD
•added 2006/07/27 11:04 a.m.•23 views

CVE-2006-3900

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

6.8CVSS5.7AI score0.01523EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2006/07/27 10:00 a.m.•36 views

CVE-2006-3900

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

5.7AI score0.01523EPSS
SaveExploits0References8
CVE
CVE
•added 2006/07/27 10:00 a.m.•55 views

CVE-2006-3900

The CVE-2006-3900 entry describes a Cross-site Scripting (XSS) vulnerability in TP-Book, affecting guestbook.php in version 1.00 and earlier. The issue arises via the name parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P)...

6.8CVSS5.9AI score0.01523EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/27 12:00 a.m.•6 views

CVE-2006-3900: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...

6.8CVSS6AI score0.01523EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/07/26 12:00 a.m.•151 views

[Full-disclosure] TP-Book <= 1.00 Cross Site Scripting Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: TP-Book = 1.00 Cross Site Scripting Vulnerabilities Release Date: 2006/07/25 Last Modified: 2006/07/25 Author: Tamriel tamriel at gmx dot net Application: TP-Book = 1.00 Risk: Low Vendor Status: not contacted Vendor Site:...

0.5AI score
SaveExploits0
myhack58
myhack58
•added 2006/07/23 12:00 a.m.•36 views

Hack ultimate case of the Black God five law Secret line Arena-vulnerability warning-the black bar safety net

Inclusive of all things the night is full of mystery...... At night is the hackers of the world, because the evening Internet, the Internet speed was fast, coupled with the webmaster spiritually LAX. Due to various reasons, have staged a lot of this shouldn't have happened...... 1 2 o'clock sharp...

7.2AI score
SaveExploits0
NVD
NVD
•added 2006/06/07 10:02 a.m.•23 views

CVE-2006-2882

Multiple cross-site scripting XSS vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 GBOOKUNAME, 2 GBOOKEMAIL, 3 GBOOKCITY, 4 GBOOKCOU, 5 GBOOKWWW, and 6 GBOOKMESS form fields...

4.3CVSS5.8AI score0.01394EPSS
SaveExploits1References7
CVE
CVE
•added 2006/06/07 10:00 a.m.•51 views

CVE-2006-2882

The CVE-2006-2882 entry describes multiple cross-site scripting (XSS) vulnerabilities in ASPScriptz Guest Book 2.0 and earlier, exploitable through submit.asp via six fields (GBOOK_UNAME, GBOOK_EMAIL, GBOOK_CITY, GBOOK_COU, GBOOK_WWW, GBOOK_MESS). Affected software is ASPScriptz Guest Book 2.0 an...

4.3CVSS5.8AI score0.01394EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/07 12:00 a.m.•11 views

CVE-2006-2882: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 GBOOKUNAME, 2 GBOOKEMAIL, 3 GBOOKCITY, 4 GBOOKCOU, 5 GBOOKWWW, and 6 GBOOKMESS form fields...

4.3CVSS5.8AI score0.01394EPSS
SaveExploits1References1
NVD
NVD
•added 2006/06/06 8:06 p.m.•27 views

CVE-2006-2837

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

4.3CVSS5.7AI score0.0118EPSS
SaveExploits0References4
Prion
Prion
•added 2006/06/06 8:06 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

4.3CVSS6.2AI score0.0118EPSS
SaveExploits0References4
CVE
CVE
•added 2006/06/06 8:03 p.m.•87 views

CVE-2006-2837

CVE-2006-2837 describes a cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book. The flaw allows remote attackers to inject arbitrary web script or HTML through certain comment fields on the Sign Our GuestBook page, most likely the x_Comments parameter to guestbookadd.asp. The conn...

4.3CVSS5.7AI score0.0118EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2006/06/06 8:03 p.m.•39 views

CVE-2006-2837

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

5.7AI score0.0118EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/06 12:00 a.m.•8 views

CVE-2006-2837: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...

4.3CVSS6AI score0.0118EPSS
SaveExploits0References1
Rows per page
Query Builder