Lucene search
K

9 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

PHP JackKnife 2.21 (PHPJK) G_Display.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

PHP JackKnife 2.21 (PHPJK) G_Display.php iCategoryUnq Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...

7.1AI score
Exploits0
NVD
NVD
added 2007/06/04 5:30 p.m.11 views

CVE-2007-3000

Multiple SQL injection vulnerabilities in PHP JackKnife PHPJK allow remote attackers to execute arbitrary SQL commands via 1 the iCategoryUnq parameter to GDisplay.php or 2 the iSearchID parameter to Search/DisplayResults.php...

7.5CVSS8.6AI score0.00991EPSS
Exploits1References7
Prion
Prion
added 2007/06/04 5:30 p.m.12 views

Design/Logic Flaw

PHP JackKnife PHPJK allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid value of the iParentUnq parameter, or a request to GDisplay.php with an invalid 2 iCategoryUnq or 3 sSort array parameter, which reveals the path in various error messages...

5CVSS6.8AI score0.00667EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2007/06/04 5:30 p.m.11 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP JackKnife PHPJK allow remote attackers to inject arbitrary web script or HTML via 1 the sUName parameter to UserArea/Authenticate.php, 2 the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the 3 iCategoryUnq, 4 iDBLoc, 5...

4.3CVSS5.9AI score0.0279EPSS
Exploits2References7Affected Software1
Prion
Prion
added 2007/06/04 5:30 p.m.9 views

Sql injection

Multiple SQL injection vulnerabilities in PHP JackKnife PHPJK allow remote attackers to execute arbitrary SQL commands via 1 the iCategoryUnq parameter to GDisplay.php or 2 the iSearchID parameter to Search/DisplayResults.php...

7.5CVSS9.3AI score0.00991EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2007/06/04 5:0 p.m.15 views

CVE-2007-3001

Multiple cross-site scripting XSS vulnerabilities in PHP JackKnife PHPJK allow remote attackers to inject arbitrary web script or HTML via 1 the sUName parameter to UserArea/Authenticate.php, 2 the sAccountUnq parameter to UserArea/NewAccounts/index.php, or the 3 iCategoryUnq, 4 iDBLoc, 5...

5.7AI score0.0279EPSS
Exploits1References7
exploitpack
exploitpack
added 2007/05/31 12:0 a.m.15 views

PHP JackKnife 2.21 - (PHPJK) G_Display.php Multiple Cross-Site Scripting Vulnerabilities

PHP JackKnife 2.21 - PHPJK GDisplay.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2007/05/31 12:0 a.m.30 views

PHP JackKnife 2.21 - '(PHPJK) G_Display.php?iCategoryUnq' SQL Injection

source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

7AI score
Exploits0
Rows per page
Query Builder