Lucene search
+L

56 matches found

Prion
Prion
•added 2008/06/26 5:41 p.m.•16 views

Sql injection

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

7.5CVSS9.3AI score0.00967EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/26 12:00 a.m.•3 views

CVE-2008-2870: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2007/11/19 12:00 a.m.•839 views

FairSoft S.Mini web Busines Prelease & Calendar asp Sql injection

thnx bro FairSoft S.Mini web Busines Prelease Calendar asp Sql injection include patch...ocf,ns ocf/Calendar/ViewEvent.asp,ns/Calendar/ViewEvent.asp,aboutus/newsroom/ViewPressRelease.asp Credit : CodeXpLoder'tq Mail : codexploderathotmaildotcom Site : codexploder.biyosecurity.net,biyofrm.com Sour...

SaveExploits0
seebug.org
seebug.org
•added 2007/03/24 12:00 a.m.•107 views

aspWebCalendar 4.5 (calendar.asp eventid) SQL Injection Vulnerability

No description provided by source. Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQL Exampl...

7.1AI score
SaveExploits0
Prion
Prion
•added 2006/04/25 12:50 p.m.•22 views

Sql injection

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...

7.5CVSS8.7AI score0.01185EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/25 12:00 a.m.•4 views

CVE-2006-2018: Undefined Security Weakness

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4...

7.5CVSS6.4AI score0.01182EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2005/02/20 5:00 a.m.•38 views

CVE-2004-1552

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...

8.1AI score0.04077EPSS
SaveExploits3References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/20 12:00 a.m.•2 views

CVE-2004-1552: Undefined Security Weakness

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...

7.5CVSS6.4AI score0.04077EPSS
SaveExploits3References1
NVD
NVD
•added 2004/12/31 5:00 a.m.•20 views

CVE-2004-1552

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via 1 the username field on the login page or 2 the eventid parameter to calendar.asp...

7.5CVSS8.1AI score0.04077EPSS
SaveExploits3References9
CVE
CVE
•added 2004/09/01 4:00 a.m.•70 views

CVE-2004-0036

CVE-2004-0036 describes a SQL injection in calendar.php for vBulletin Forum 2.3.x before 2.3.4, exploitable via the eventid parameter to exfiltrate data. Affected component is the calendar feature in vBulletin 2.3.x; root cause is improper input handling in eventid. Impact stated: attackers can s...

5CVSS7.2AI score0.01185EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•38 views

CVE-2004-0036

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

7.1AI score0.01185EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•4 views

CVE-2004-0036: Undefined Security Weakness

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

5CVSS5.9AI score0.01185EPSS
SaveExploits0References1
NVD
NVD
•added 2004/01/20 5:00 a.m.•26 views

CVE-2004-0036

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...

5CVSS7.1AI score0.01185EPSS
SaveExploits0References5
securityvulns
securityvulns
•added 2004/01/06 12:00 a.m.•50 views

vBulletin Forum 2.3.xx calendar.php SQL Injection

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2004/01/06 12:00 a.m.•36 views

vBulletin calendar.php eventid Parameter SQL Injection

A vulnerability has been discovered in the 'calendar.php' script that allows unauthorized users to inject SQL commands through the 'eventid' parameter. An attacker may use this flaw to gain the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From:...

5CVSS5.7AI score0.01185EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2004/01/05 12:00 a.m.•25 views

vbulletinSQL.txt

vBulletin Forum 2.3.xx calendar.php SQL Injection ======================================================== Website: www.safechina.net Discovered by: mslug [email protected] Description: ============= There exist a sql injection problem in calendar.php. Notice the eventid field. -------- Cut fr...

7.4AI score
SaveExploits0
Rows per page
Query Builder