Lucene search
+L

4 matches found

NVD
NVD
•added 2023/01/05 8:15 a.m.•29 views

CVE-2023-22626

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

7.5CVSS7.2AI score0.00831EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/01/05 12:00 a.m.•30 views

CVE-2023-22626

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

7.5AI score0.00831EPSS
SaveExploits1References1
NVD
NVD
•added 2007/11/22 12:46 a.m.•33 views

CVE-2007-6082

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php...

9.3CVSS7.3AI score0.03638EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/22 12:00 a.m.•5 views

CVE-2007-6082: Improper Control of Generation of Code

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php...

9.3CVSS6AI score0.03638EPSS
SaveExploits1References2
Rows per page
Query Builder