Lucene search
+L

349 matches found

Prion
Prion
added 2008/01/31 8:00 p.m.27 views

Sql injection

SQL injection vulnerability in index.php in the Glossary comglossary 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2008/01/31 7:30 p.m.57 views

CVE-2008-0514

CVE-2008-0514 affects the Glossary (com_glossary) 2.0 component used by Mambo/Joomla!, where index.php is vulnerable to SQL injection through the catid parameter in a display action. The issue enables remote attackers to execute arbitrary SQL commands and potentially access or modify data. The vu...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References4Affected Software2
Cvelist
Cvelist
added 2008/01/31 7:30 p.m.33 views

CVE-2008-0514

SQL injection vulnerability in index.php in the Glossary comglossary 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action...

8.4AI score0.00967EPSS
SaveExploits2References4
seebug.org
seebug.org
added 2008/01/31 12:00 a.m.18 views

Mambo Component Glossary 2.0 (catid) SQL Injection Vulnerability

No description provided by source. joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/01/30 12:00 a.m.24 views

Mambo Component Glossary 2.0 (catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Component Glossary 2.0 catid SQL Injection Vulnerability ================================================================ joomlaGlossary V2.0 SQL Injectioncomglossary...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/01/30 12:00 a.m.38 views

Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection

joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...

7.5CVSS5.8AI score0.00967EPSS
SaveExploits2
exploitpack
exploitpack
added 2008/01/30 12:00 a.m.23 views

Mambo Component com_glossary 2.0 - catid SQL Injection

Mambo Component comglossary 2.0 - catid SQL Injection joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...

0.1AI score
SaveExploits0
NVD
NVD
added 2006/11/17 12:07 a.m.20 views

CVE-2006-5946

SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands via the alpha parameter...

7.5CVSS8.4AI score0.01273EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2006/11/17 12:00 a.m.34 views

CVE-2006-5946

SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands via the alpha parameter...

8.4AI score0.01273EPSS
SaveExploits2References7
CVE
CVE
added 2006/11/17 12:00 a.m.51 views

CVE-2006-5946

CVE-2006-5946 affects FunkyASP Glossary 1.0. The vulnerability is an SQL injection in demo/glossary/glossary.asp, exploitable via the alpha parameter to cause remote execution of arbitrary SQL. NVD metrics indicate a high impact with Partial confidentiality, integrity, and availability, base scor...

7.5CVSS8.8AI score0.01273EPSS
SaveExploits2References7Affected Software1
Positive Technologies
Positive Technologies
added 2006/11/17 12:00 a.m.9 views

PT-2006-6611 · Funkyasp · Funkyasp Glossary

Name of the Vulnerable Software and Affected Versions: FunkyASP Glossary version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in the demo/glossary/glossary.asp file. Recommendations: For FunkyASP Glossary...

7.5CVSS7.9AI score0.01273EPSS
SaveExploits2References9
securityvulns
securityvulns
added 2006/11/16 12:00 a.m.47 views

FunkyASP Glossary v1.0 [injection sql]

vendor site:http://www.funkyasp.co.uk/ product:FunkyASP Glossary v1.0 bug:injection sql risk:medium injection sql : http://www.demo.funkyasp.co.uk/demo/glossary/glossary.asp?alpha='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

0.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2006/11/16 12:00 a.m.24 views

funkyasp10.txt

vendor site:http://www.funkyasp.co.uk/ product:FunkyASP Glossary v1.0 bug:injection sql risk:medium injection sql : http://www.demo.funkyasp.co.uk/demo/glossary/glossary.asp?alpha='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2006/11/14 12:00 a.m.16 views

FunkyASP Glossary 1.0 - Glossary.asp SQL Injection

FunkyASP Glossary 1.0 - Glossary.asp SQL Injection source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

0.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2005/11/03 12:00 a.m.40 views

Moodle SQL injection flaws

The remote host is running a version of the Moodle suite, an open-source course management system written in PHP, which is older than version 1.4.3. The remote version of this software is vulnerable to SQL injection issue in 'glossary' module due to a lack of user input sanitization. OpenVAS...

7.5CVSS7.3AI score0.01818EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2005/11/03 12:00 a.m.49 views

Moodle SQL injection flaws

The remote version of Moodle is vulnerable to a SQL injection issue in SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.5CVSS6.8AI score0.01818EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2005/08/14 12:00 a.m.28 views

jawsGlossary.txt

XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...

7.4AI score
SaveExploits0
CVE
CVE
added 2005/07/17 4:00 a.m.58 views

CVE-2004-2232

The CVE covers Moodle

7.5CVSS7.6AI score0.01369EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2005/07/17 4:00 a.m.40 views

CVE-2004-2232

SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements...

7.5AI score0.01369EPSS
SaveExploits0References6
CVE
CVE
added 2005/06/01 4:00 a.m.68 views

CVE-2005-1800

JAWS Glossary Gadget XSS (CVE-2005-1800) affects versions 0.4–0.5.1. The flaw stems from inadequate validation of user input in the GlossaryModel/view term handling for the term parameter to index.php, allowing remote script/HTML injection via XSS. Impact is web-based cross-site scripting; exploi...

4.3CVSS5.7AI score0.03057EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder