Lucene search
+L

270 matches found

NVD
NVD
•added 2008/07/03 6:41 p.m.•30 views

CVE-2008-2997

Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...

4.3CVSS5.7AI score0.01445EPSS
SaveExploits2References4
Prion
Prion
•added 2008/05/20 5:20 p.m.•20 views

Authentication flaw

MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and exceed application quotas via a direct request to admin/adduser.php...

7.5CVSS7.2AI score0.02501EPSS
SaveExploits2References3Affected Software1
seebug.org
seebug.org
•added 2007/01/04 12:00 a.m.•33 views

Cacti Copy_Cacti_User.PHP SQL注入漏洞

Cacti是一款基于PHP的WEB应用程序。 Cacti不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,获得敏感信息。 问题是'CopyCactiUser.PHP'脚本对用户提交的WEB参数缺少过滤,提交恶意脚本代码作为参数数据,可导致获得敏感信息。 Cacti Cacti 0.8.6i 目前没有解决方案提供: http://cacti.net/ ?php printr' --------------------------------------------------------------------------- Cacti 0.8.6i...

7.1AI score
SaveExploits0
Prion
Prion
•added 2006/02/10 11:02 a.m.•23 views

Design/Logic Flaw

The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...

6.4CVSS7AI score0.02561EPSS
SaveExploits1References6Affected Software1
Prion
Prion
•added 2006/01/11 9:03 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

4.3CVSS6.1AI score0.01429EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2006/01/11 9:03 p.m.•29 views

CVE-2006-0168

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

4.3CVSS5.7AI score0.01429EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2006/01/11 9:00 p.m.•40 views

CVE-2006-0168

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

5.7AI score0.01429EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/11 12:00 a.m.•7 views

CVE-2006-0168: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...

4.3CVSS6AI score0.01429EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2000/11/15 12:00 a.m.•26 views

Poll It CGI 2.0 - Multiple Vulnerabilities

Poll It CGI 2.0 - Multiple Vulnerabilities !/usr/bin/perl Poll It CGI v2.0 exploit keelis/havoc korp 2000 shouts to modjo, p, zen, kd, ab, all the script kiddies. keelisathushmaildotcom use Socket; $host, $cgiloc = @ARGV0,1; $ip=inetaton$host; print"\n\t+--- Poll It CGI v2.0 exploit ---+";...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2000/11/15 12:00 a.m.•155 views

Poll It CGI 2.0 - Multiple Vulnerabilities

!/usr/bin/perl Poll It CGI v2.0 exploit keelis/havoc korp 2000 shouts to modjo, p, zen, kd, ab, all the script kiddies. keelisathushmaildotcom use Socket; $host, $cgiloc = @ARGV0,1; $ip=inetaton$host; print"\n\t+--- Poll It CGI v2.0 exploit ---+"; print"\n\t+--- keelis/havoc korp 2000 ---+\n\n\n"...

6.4CVSS5.8AI score0.02268EPSS
SaveExploits1
Rows per page
Query Builder