Lucene search
K

3090 matches found

CNVD
CNVD
added 2015/07/08 12:0 a.m.2 views

Milw0rm Clone Script 'admin/login.php' SQL Injection Vulnerability

Milw0rm Clone Script is a Milw0rm clone script. Milw0rm Clone Script 'admin/login.php' fails to properly filter user-supplied input and is vulnerable to multiple SQL injection vulnerabilities. This allows attackers to compromise the application, access or modify data, or exploit potential...

8.8AI score
Exploits0References1
CNVD
CNVD
added 2015/06/23 12:0 a.m.2 views

Milw0rm Clone Script SQL Injection Vulnerability

Milw0rm is a hacking and defense interest group that provides security services such as vulnerability mining, security information, hacking and defense, security tools and other security services for IT technicians.Milw0rm Clone Script is a script for sharing and managing the Milw0rm website's...

7.5CVSS8.7AI score0.02127EPSS
Exploits1References1
NVD
NVD
added 2015/06/18 6:59 p.m.8 views

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

7.5CVSS8.5AI score0.02127EPSS
Exploits1References1
CVE
CVE
added 2015/06/18 6:0 p.m.42 views

CVE-2015-4658

CVE-2015-4658 is described across multiple sources as a SQL injection vulnerability in the Milw0rm Clone Script 1.0. The affected component is the admin/login.php script, with input fields (1) usr and (2) pwd used to construct SQL queries, enabling remote attackers to execute arbitrary SQL comman...

7.5CVSS8.8AI score0.02127EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2015/06/18 6:0 p.m.12 views

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

8.5AI score0.02127EPSS
Exploits1References1
Exploit DB
Exploit DB
added 2015/06/15 12:0 a.m.47 views

Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass

| Exploit Title: Milw0rm Clone Script v1.0 Auth Bypass SQL Injection Vulnerability | | Date: 06.13.2015 | | Exploit Daddy: Walid Naceri | | Vendor Homepage: http://milw0rm.sourceforge.net/ | | Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download | | Version: v1.0 | |...

7.4AI score
Exploits0
NVD
NVD
added 2015/05/29 2:59 p.m.8 views

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

7.5CVSS8.4AI score0.0096EPSS
Exploits1References4
Prion
Prion
added 2015/05/29 2:59 p.m.13 views

Sql injection

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

7.5CVSS9AI score0.0096EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2015/05/29 2:0 p.m.13 views

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

8.4AI score0.0096EPSS
Exploits1References4
CVE
CVE
added 2015/05/29 2:0 p.m.50 views

CVE-2015-4137

CVE-2015-4137 describes an SQL injection vulnerability in Milw0rm Clone Script 1.0, specifically in the related.php module. The vulnerability allows remote attackers to execute arbitrary SQL commands through the program parameter, leading to partial confidentiality and integrity impacts and a hig...

7.5CVSS8.7AI score0.0096EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2015/05/26 12:0 a.m.3 views

Milw0rm Clone Script 'related.php' SQL Injection Vulnerability

The Milw0rm Clone Script is a script for sharing and managing vulnerability categorization in the Milw0rm website. A SQL injection vulnerability exists in Milw0rm Clone Script, which allows remote attackers to exploit the vulnerability to submit specially crafted SQL queries to manipulate or obta...

7.5CVSS8.2AI score0.0096EPSS
Exploits1References1
Kitploit
Kitploit
added 2015/05/22 11:6 p.m.23 views

FTPMap - FTP scanner in C

Ftpmap scans remote FTP servers to indentify what software and what versions they are running. It uses program-specific fingerprints to discover the name of the software even when banners have been changed or removed, or when some features have been disabled. also FTP-Map can detect Vulnerables b...

7.5AI score
Exploits0References1
Packet Storm
Packet Storm
added 2015/05/19 12:0 a.m.33 views

Milw0rm Clone Script 1.0 SQL Injection

| Exploit Title: Milw0rm Clone Script v1.0 - time based SQLi | | Date: 05.19.2015 | | Exploit Daddy: pancaker | | Vendor Homepage: http://milw0rm.sourceforge.net/ | | Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download | | Version: v1.0 | | Tested On: Ubuntu 10.04 | ...

0.2AI score
Exploits0
OSV
OSV
added 2015/05/12 7:59 p.m.1 views

DEBIAN-CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

5CVSS7.2AI score0.03365EPSS
Exploits0References1
Prion
Prion
added 2015/05/12 7:59 p.m.9 views

Xxe

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

5CVSS7AI score0.03365EPSS
Exploits0References12Affected Software5
OSV
OSV
added 2015/05/01 12:0 a.m.2 views

UBUNTU-CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

5CVSS7.3AI score0.03365EPSS
Exploits0References4
ArchLinux
ArchLinux
added 2015/04/30 12:0 a.m.34 views

perl-xml-libxml: XML External Entity

Unpreserved unset options after a clone call e.g: in loadxml leads to not preserved expandentities. Therefore it leads to a XML-External-Entity Vulnerability...

5CVSS1.9AI score0.03365EPSS
Exploits0References3
CNVD
CNVD
added 2015/04/01 12:0 a.m.3 views

Mercurial sshpeer '_validaterepo' function arbitrary command execution vulnerability

Mercurial is a software developer Matt Mackall developed a set of cross-platform distributed version control software written in the Python language . The software supports the simultaneous processing of plain text and binary files and so on. A security vulnerability exists in the 'validaterepo'...

7.5CVSS7.5AI score0.01129EPSS
Exploits1References1
OSV
OSV
added 2015/03/31 2:59 p.m.4 views

CVE-2014-9462

The validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command...

7.5CVSS9.5AI score0.01129EPSS
Exploits1References7
OSV
OSV
added 2015/03/31 2:59 p.m.1 views

DEBIAN-CVE-2014-9462

The validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command...

7.5CVSS9AI score0.01129EPSS
Exploits1References1
Rows per page
Query Builder