Lucene search
K

3856 matches found

Cvelist
Cvelist
added 2007/10/25 7:0 p.m.20 views

CVE-2003-1526

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...

6.6AI score0.00013EPSS
Exploits1References2
Cvelist
Cvelist
added 2007/10/24 11:0 p.m.23 views

CVE-2003-1469

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message...

6.5AI score0.0215EPSS
Exploits1References5
NVD
NVD
added 2007/10/23 5:46 p.m.11 views

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

7.5CVSS8AI score0.25736EPSS
Exploits1References9
Prion
Prion
added 2007/10/23 5:46 p.m.12 views

Buffer overflow

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

7.5CVSS8.6AI score0.25736EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/10/23 5:0 p.m.14 views

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

8AI score0.25736EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/10/18 10:0 a.m.17 views

CVE-2002-2276

Ultimate PHP Board UPB 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message...

6.3AI score0.00392EPSS
Exploits1References3
NVD
NVD
added 2007/10/12 1:17 a.m.17 views

CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon LPD in Cisco IOS before 12.218SXF11, 12.416a, and 12.42T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to th...

9.3CVSS8AI score0.60311EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/10/12 1:0 a.m.26 views

CVE-2007-5381

Stack-based buffer overflow in the Line Printer Daemon LPD in Cisco IOS before 12.218SXF11, 12.416a, and 12.42T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated by a telnet session to th...

8AI score0.60311EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/10/09 6:0 p.m.16 views

CVE-2007-5293

Multiple cross-site scripting XSS vulnerabilities in IDMOS 1.0-beta aka Phoenix allow remote attackers to inject arbitrary web script or HTML via the 1 errmsg parameter to error.php and the 2 content parameter to templates/simple/ia.php...

5.8AI score0.08894EPSS
Exploits0References9
Prion
Prion
added 2007/10/01 8:17 p.m.17 views

Default credentials

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

5CVSS6.9AI score0.00389EPSS
Exploits0References4Affected Software1
securityvulns
securityvulns
added 2007/09/04 12:0 a.m.66 views

Tor cross application scripting

Cross applicaiton scripting via Tor proxy erro message...

2.5AI score
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2007/08/21 12:0 a.m.15 views

litecommerce 2004 - category_id SQL Injection

litecommerce 2004 - categoryid SQL Injection litecommerce Copyright © 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...

Exploits0
Exploit DB
Exploit DB
added 2007/08/21 12:0 a.m.30 views

litecommerce 2004 - 'category_id' SQL Injection

litecommerce Copyright © 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...

7AI score
Exploits0
0day.today
0day.today
added 2007/08/21 12:0 a.m.30 views

litecommerce 2004 (category_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== litecommerce 2004 categoryid Remote SQL Injection Vulnerability ================================================================== litecommerce Copyright © 2004 - Remote S...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2007/08/17 12:0 a.m.127 views

IBM Rational ClearQuest Web SQL Injection Login Bypass

+==============================================================+ + IBM Rational ClearQuest Web Login Bypass SQL Injection + +==============================================================+ DISCOVERED BY: ============== SecureState sasquatch - [email protected] rel1k - [email protected]...

0.7AI score
Exploits0
Packet Storm
Packet Storm
added 2007/08/15 12:0 a.m.30 views

ibm-sql.txt

+==============================================================+ + IBM Rational ClearQuest Web Login Bypass SQL Injection + +==============================================================+ DISCOVERED BY: ============== SecureState sasquatch - [email protected] rel1k - [email protected]...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2007/08/14 12:0 a.m.17 views

IBM Rational ClearQuest - Web Authentication Bypass SQL Injection

IBM Rational ClearQuest - Web Authentication Bypass SQL Injection +==============================================================+ + IBM Rational ClearQuest Web Login Bypass SQL Injection + +==============================================================+ DISCOVERED BY: ============== SecureState...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2007/08/14 12:0 a.m.72 views

IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection

+==============================================================+ + IBM Rational ClearQuest Web Login Bypass SQL Injection + +==============================================================+ DISCOVERED BY: ============== SecureState sasquatch - [email protected] rel1k - [email protected]...

7.4AI score
Exploits0
Prion
Prion
added 2007/08/09 9:17 p.m.15 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified MeetingPlace Web Conferencing MP 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 Success Template STPL and 2 Failure Template FTPL parameters, which are not properly handled in an err...

4.3CVSS6.2AI score0.00791EPSS
Exploits0References10Affected Software1
NVD
NVD
added 2007/08/09 9:17 p.m.11 views

CVE-2007-4284

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified MeetingPlace Web Conferencing MP 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 Success Template STPL and 2 Failure Template FTPL parameters, which are not properly handled in an err...

4.3CVSS5.9AI score0.00791EPSS
Exploits0References10
Rows per page
Query Builder