Lucene search
+L

257 matches found

Exploit DB
Exploit DB
added 2007/07/27 12:00 a.m.49 views

Adult Directory - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Adult Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: http://photo.sourceforge.net/...

7.5CVSS5.8AI score0.01043EPSS
SaveExploits1
Exploit DB
Exploit DB
added 2007/07/25 12:00 a.m.36702 views

IndexScript 2.8 - 'cat_id' SQL Injection

Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...

7.5CVSS5.8AI score0.01407EPSS
SaveExploits2
NVD
NVD
added 2007/07/17 12:30 a.m.22 views

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

7.5CVSS8.5AI score0.01029EPSS
SaveExploits1References4
Prion
Prion
added 2007/07/17 12:30 a.m.15 views

Sql injection

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

7.5CVSS9.2AI score0.01029EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2007/07/17 12:00 a.m.28 views

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

8.5AI score0.01029EPSS
SaveExploits1References4
seebug.org
seebug.org
added 2007/07/15 12:00 a.m.90 views

Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/07/14 12:00 a.m.37 views

Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =========================================================================== Prozilla Directory Script directory.php catid SQL Injection Vulnerbility ===========================================================================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/07/14 12:00 a.m.29 views

Prozilla Directory Script - Directory.php?cat_id SQL Injection

Prozilla Directory Script - Directory.php?catid SQL Injection --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==--...

0.4AI score
SaveExploits0
NVD
NVD
added 2007/07/03 9:30 p.m.20 views

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.4AI score0.01041EPSS
SaveExploits2References5
Prion
Prion
added 2007/07/03 9:30 p.m.21 views

Sql injection

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS9.1AI score0.01041EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2007/07/03 9:00 p.m.29 views

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.4AI score0.01041EPSS
SaveExploits2References5
Prion
Prion
added 2007/07/03 6:30 p.m.25 views

Sql injection

Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...

7.5CVSS9.3AI score0.02493EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2007/06/04 5:30 p.m.24 views

CVE-2007-3003

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225...

7.5CVSS8.2AI score0.01009EPSS
SaveExploits1References5
Prion
Prion
added 2007/03/20 10:19 p.m.25 views

Sql injection

Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the 1 imageid or 2 catid parameter to a gallery.php; the 3 newsid parameter to b news.php or c print.php; 4 the newscatid parameter to news.php; the 5 catid, 6 topicid, or 7 postid...

7.5CVSS9.2AI score0.02049EPSS
SaveExploits5References11Affected Software1
Prion
Prion
added 2007/02/21 11:28 a.m.21 views

Sql injection

SQL injection vulnerability in inclistnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CATID parameter...

10CVSS9AI score0.01578EPSS
SaveExploits2References5Affected Software1
CVE
CVE
added 2007/02/21 11:00 a.m.67 views

CVE-2007-1021

The CVE-2007-1021 entry concerns CodeAvalanche News 1.x, where a SQL injection flaw in inc_listnews.asp allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter. The underlying issue is improper handling/validation of CAT_ID, enabling crafted input to affect the database...

10CVSS8.4AI score0.01578EPSS
SaveExploits2References5Affected Software1
seebug.org
seebug.org
added 2007/02/16 12:00 a.m.15 views

CodeAvalanche News 1.x (CAT_ID) Remote SQL Injection Vulnerability

No description provided by source. CodeAvalanche News SQL Injection Software: CodeAvalanche News Download: http://www.aspindir.com/indir.asp?id=3315 Risk: High Found by: beks http://target/path/inclistnews.asp?CATID=17+union+select+0,0,0,0,Password+from+Params...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/02/15 12:00 a.m.19 views

CodeAvalanche News 1.x - CAT_ID SQL Injection

CodeAvalanche News 1.x - CATID SQL Injection CodeAvalanche News SQL Injection Software: CodeAvalanche News Download: http://www.aspindir.com/indir.asp?id=3315 Risk: High Found by: beks http://target/path/inclistnews.asp?CATID=17+union+select+0,0,0,0,Password+from+Params milw0rm.com 2007-02-15...

1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/02/15 12:00 a.m.40 views

CodeAvalanche News 1.x - 'CAT_ID' SQL Injection

CodeAvalanche News SQL Injection Software: CodeAvalanche News Download: http://www.aspindir.com/indir.asp?id=3315 Risk: High Found by: beks http://target/path/inclistnews.asp?CATID=17+union+select+0,0,0,0,Password+from+Params milw0rm.com 2007-02-15...

10CVSS5.8AI score0.01578EPSS
SaveExploits2
Cvelist
Cvelist
added 2006/12/01 1:00 a.m.35 views

CVE-2006-6208

Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the 1 ADID, 2 catid, 3 subid, and 4 adid parameters to a ad.asp, the 5 cid parameter to b dircat.asp, and the 6 sid parameter to c dirSub.asp...

8.5AI score0.01274EPSS
SaveExploits4References7
Rows per page
Query Builder