Lucene search
+L

31 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-3489

Malware in sbrugna...

6.8CVSS6.4AI score0.0346EPSS
SaveExploits1References21
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2007-3533

Malware in sbrugna...

7.5CVSS6.4AI score0.01041EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-3510

Malware in sbrugna...

7.5CVSS6.4AI score0.02493EPSS
SaveExploits1References7
CNVD
CNVD
•added 2018/01/31 12:00 a.m.•18 views

Vastal I-Tech Buddy Zone Facebook Clone SQL Injection Vulnerability

Vastal I-Tech Buddy Zone Facebook Clone is a set of scripts for online social networking sites. A SQL injection vulnerability exists in Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability can be exploited by a remote attacker by sending the 'requestid' parameter to the...

9.8CVSS8.1AI score0.0305EPSS
SaveExploits2References1
OSV
OSV
•added 2018/01/29 5:29 a.m.•16 views

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

9.8CVSS5.8AI score0.0305EPSS
SaveExploits2References2
Prion
Prion
•added 2018/01/29 5:29 a.m.•24 views

Sql injection

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

7.5CVSS9.8AI score0.0305EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2018/01/29 5:29 a.m.•30 views

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

9.8CVSS9.9AI score0.0305EPSS
SaveExploits2References2
CVE
CVE
•added 2018/01/29 5:00 a.m.•68 views

CVE-2018-6367

CVE-2018-6367 is a confirmed SQL injection in the Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability is triggered via the /chat_im/chat_window.php with the request_id parameter or via the /search_events.php with the category parameter. The NVD entry reports a CVSS v3.0 base ...

9.8CVSS9.8AI score0.0305EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2018/01/29 5:00 a.m.•39 views

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

10AI score0.0305EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/29 12:00 a.m.•5 views

CVE-2018-6367: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

9.8CVSS8.2AI score0.0305EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/01/29 12:00 a.m.•1 views

PT-2018-17509

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9 Description A SQL Injection issue exists, allowing potential exploitation through specific parameters in certain API endpoints. The issue can be exploited via the "request id" parameter in...

9.8CVSS0.0305EPSS
SaveExploits2References4
zdt
zdt
•added 2018/01/28 12:00 a.m.•35 views

Buddy Zone 2.9.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/01/28 12:00 a.m.•40 views

Buddy Zone 2.9.9 - SQL Injection

Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

8.6AI score
SaveExploits0
Prion
Prion
•added 2007/07/03 9:30 p.m.•24 views

Sql injection

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS9.1AI score0.01041EPSS
SaveExploits2References5Affected Software1
NVD
NVD
•added 2007/07/03 9:30 p.m.•26 views

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.4AI score0.01041EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2007/07/03 9:00 p.m.•35 views

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.4AI score0.01041EPSS
SaveExploits2References5
CVE
CVE
•added 2007/07/03 9:00 p.m.•74 views

CVE-2007-3549

CVE-2007-3549 describes an SQL injection in Buddy Zone 1.5: the vulnerable script is view_sub_cat.php and the flaw is exploitable via the cat_id parameter, allowing remote execution of arbitrary SQL commands. Affected software: Buddy Zone 1.5; vulnerable component: view_sub_cat.php (cat_id). Impa...

7.5CVSS8.4AI score0.01041EPSS
SaveExploits2References5Affected Software1
Prion
Prion
•added 2007/07/03 6:30 p.m.•29 views

Sql injection

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

7.5CVSS9.3AI score0.02493EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2007/07/03 6:30 p.m.•29 views

CVE-2007-3526

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

7.5CVSS8.5AI score0.02493EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2007/07/03 6:00 p.m.•48 views

CVE-2007-3526

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

8.5AI score0.02493EPSS
SaveExploits1References6
Rows per page
Query Builder