Lucene search
+L

172 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/08 12:00 a.m.•9 views

CVE-2010-4905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...

7.5CVSS6.4AI score0.01019EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2010/09/05 12:00 a.m.•49 views

Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection

=========================================================== Title: Article Directory sbizid Blind SQL Injection Vuln Script: Article Directory Price: $65 Link: http://www.softbizscripts.com/article-management-script.php =========================================================== Author: BorN To...

7.5CVSS5.2AI score0.01019EPSS
SaveExploits1
NVD
NVD
•added 2010/05/11 12:02 p.m.•29 views

CVE-2009-4864

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

4.3CVSS5.8AI score0.01245EPSS
SaveExploits2References2
Prion
Prion
•added 2010/05/11 12:02 p.m.•27 views

Sql injection

Multiple SQL injection vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from thi...

6.8CVSS9.2AI score0.01093EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2010/05/10 8:00 p.m.•48 views

CVE-2009-4865

Multiple SQL injection vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from thi...

8.5AI score0.01093EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2010/05/10 8:00 p.m.•47 views

CVE-2009-4864

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

5.8AI score0.01245EPSS
SaveExploits2References2
CVE
CVE
•added 2010/05/10 8:00 p.m.•70 views

CVE-2009-4865

CVE-2009-4865 affects the I-Escorts Directory Script and Agency Script, where multiple SQL injection flaws exist in escorts_search.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the 1) search_name and 2) languages parameters. Root caus...

6.8CVSS8.7AI score0.01093EPSS
SaveExploits1References4Affected Software2
CVE
CVE
•added 2010/05/10 8:00 p.m.•59 views

CVE-2009-4864

CVE-2009-4864 affects the I-Escorts Directory Script and Agency Script (escorts_search.php). The issue is reflected cross-site scripting (XSS) via the parameters (1) search_name and (2) languages, enabling an attacker to inject arbitrary script/HTML in the browser. Public sources corroborate XSS ...

4.3CVSS5.9AI score0.01245EPSS
SaveExploits2References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/10 12:00 a.m.•11 views

CVE-2009-4865: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from thi...

6.8CVSS6.4AI score0.01093EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/10 12:00 a.m.•10 views

CVE-2009-4864: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

4.3CVSS5.9AI score0.01245EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2010/04/29 12:00 a.m.•17 views

Your Articles Directory - Login Option SQL Injection

Your Articles Directory - Login Option SQL Injection source: https://www.securityfocus.com/bid/39796/info Article Directory Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

0.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/05 12:00 a.m.•8 views

CVE-2009-4675: Improper Authentication

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

7.5CVSS5.9AI score0.02614EPSS
SaveExploits1References2
Prion
Prion
•added 2010/01/06 10:00 p.m.•26 views

Sql injection

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

7.5CVSS9.1AI score0.01024EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2010/01/06 9:33 p.m.•40 views

CVE-2009-4574

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

8.4AI score0.01024EPSS
SaveExploits2References5
CVE
CVE
•added 2010/01/06 9:33 p.m.•68 views

CVE-2009-4574

CVE-2009-4574 describes an SQL injection in country_escorts.php of the I-Escorts Directory Script, exploitable via the country_id parameter to allow remote execution of arbitrary SQL commands. Affected details (product, version, root cause, fixes) are not provided in the connected documents. Some...

7.5CVSS6.6AI score0.01024EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/06 12:00 a.m.•7 views

CVE-2009-4574: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

7.5CVSS6.4AI score0.01024EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2009/09/22 12:00 a.m.•39 views

BPMusic 1.0 - Blind SQL Injection

BPMusic 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/07/30 12:00 a.m.•49 views

Article Directory Script Seo 2.5 XSS

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Article Directory Script Seo 2.5 Search Remote XSS Vulnerability + Software : Article Directory Script Seo + Author : 599eme Man + Contact : Flouf@live....

0.2AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/06/04 12:00 a.m.•14 views

Host Directory PRO 2.1.0 - Remote Database Backup

Host Directory PRO 2.1.0 - Remote Database Backup Host Directory Pro Bypass & Backup DB Disc. Multiple Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 28/03/09 Home: yildirimordulari.com / z0rlu.blogspot.com / www.experl.com /...

7.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/24 12:00 a.m.•35 views

Mole Group Restaurant Directory 3.0 Password Changer

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

0.2AI score
SaveExploits0
Rows per page
Query Builder