Lucene search
+L

4 matches found

CNVD
CNVD
added 2025/07/18 12:00 a.m.7 views

Modern Bag contact-list.php File SQL Injection Vulnerability

Modern Bag is an online management system. Modern Bag suffers from an SQL injection vulnerability that stems from an error in the parameter idStatus in file /admin/contact-list.php that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illega...

9.8CVSS8.4AI score0.00394EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/03/14 2:59 p.m.27 views

CVE-2017-5668

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

9.8CVSS7.3AI score0.02983EPSS
SaveExploits0References3
NVD
NVD
added 2006/06/27 6:05 p.m.18 views

CVE-2006-3250

Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file, which triggers the overflow when it is imported by the user...

5.1CVSS7.8AI score0.06847EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2006/06/27 6:00 p.m.24 views

CVE-2006-3250

Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file, which triggers the overflow when it is imported by the user...

7.8AI score0.06847EPSS
SaveExploits1References6
Rows per page
Query Builder