Lucene search
+L

5787 matches found

securityvulns
securityvulns
•added 2007/02/07 12:00 a.m.•56 views

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz."scripts/session.php";...

1.4AI score
SaveExploits0
NVD
NVD
•added 2007/02/06 7:28 p.m.•24 views

CVE-2007-0797

PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...

7.5CVSS7.6AI score0.0334EPSS
SaveExploits1References6
EUVD
EUVD
•added 2007/02/06 7:00 p.m.•20 views

EUVD-2007-0794

PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...

7.5CVSS7.5AI score0.0334EPSS
SaveExploits1References6
CVE
CVE
•added 2007/02/06 7:00 p.m.•68 views

CVE-2007-0797

The CVE-2007-0797 entry describes a PHP remote file inclusion in the framework/theme/settings.php of bluevirus-design SMA-DB 0.3.9 and earlier . The underlying issue is that an attacker can supply a URL via the pfad_z parameter to cause the PHP interpreter to include remote code, enabling arbitra...

7.5CVSS7.6AI score0.0334EPSS
SaveExploits1References6Affected Software1
Prion
Prion
•added 2007/02/06 2:28 a.m.•27 views

Sql injection

SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

7.5CVSS9AI score0.01233EPSS
SaveExploits2References6Affected Software1
NVD
NVD
•added 2007/02/06 2:28 a.m.•25 views

CVE-2007-0765

SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

7.5CVSS8.4AI score0.01233EPSS
SaveExploits2References6
CVE
CVE
•added 2007/02/06 2:00 a.m.•61 views

CVE-2007-0765

CVE-2007-0765 affects the dB Masters Curium CMS (version 1.03 and earlier). The vulnerability is a SQL injection in news.php where the attacker can manipulate the c_id parameter to execute arbitrary SQL commands. The NVD entry lists a NETWORK -based, LOW -complexity exploit with no authentication...

7.5CVSS6.6AI score0.01233EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/06 12:00 a.m.•6 views

CVE-2007-0765: Undefined Security Weakness

SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

7.5CVSS6.4AI score0.01233EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2007/02/06 12:00 a.m.•65 views

MySQL 4.x5.0 (Windows) - User-Defined Function Command Execution

MySQL 4.x5.0 Windows - User-Defined Function Command Execution -- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat U...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/02/06 12:00 a.m.•51 views

MySQL 4.x/5.0 (Windows) - User-Defined Function Command Execution

-- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat UDF on port -- 80/tcp or to execute single OS commands exec UDF...

5.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/06 12:00 a.m.•6 views

CVE-2007-0797: Undefined Security Weakness

PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...

7.5CVSS6.4AI score0.0334EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2007/02/05 12:00 a.m.•21 views

SMA-DB 0.3.9 - settings.php Remote File Inclusion

SMA-DB 0.3.9 - settings.php Remote File Inclusion To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php";...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/02/05 12:00 a.m.•45 views

SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion

To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell milw0rm.com 2007-02-05...

7.5CVSS5.8AI score0.0334EPSS
SaveExploits1
seebug.org
seebug.org
•added 2007/02/05 12:00 a.m.•21 views

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz."scripts/session.php";...

7.1AI score
SaveExploits0
zdt
zdt
•added 2007/02/05 12:00 a.m.•26 views

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== SMA-DB Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell 0day.today 2018-04-11...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/02/03 12:00 a.m.•100 views

dB Masters&#39; Curium CMS &lt;= 1.03&#40;c_id&#41; Remote Blind SQL Injection Vulnerability

Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx : http://www.google.com.tr/search?q=Powered+by+dB+Masters27+Curium+CMS+1&hl=tr&start=0&sa=N In...

0.5AI score
SaveExploits0
zdt
zdt
•added 2007/02/02 12:00 a.m.•34 views

dB Masters Curium CMS <= 1.03 (c_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= dB Masters Curium CMS = 1.03 cid Remote SQL Injection Vulnerability ======================================================================= Title : dB Masters' Curium...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/02/02 12:00 a.m.•31 views

dB Masters Curium CMS 1.03 - c_id SQL Injection

dB Masters Curium CMS 1.03 - cid SQL Injection Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx :...

0.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/30 12:00 a.m.•5 views

CVE-2007-0594: Undefined Security Weakness

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD...

5CVSS5.8AI score0.01275EPSS
SaveExploits0References1
Prion
Prion
•added 2007/01/24 9:28 p.m.•24 views

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

9.3CVSS8.4AI score0.36473EPSS
SaveExploits6References88Affected Software79
Rows per page
Query Builder