Lucene search
+L

18 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-25307: Improper Neutralization of Input During Web Page Generation

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when sit...

7.2CVSS6.2AI score0.01378EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•3 views

CVE-2022-0651: Improper Neutralization of Special Elements used in an SQL Command

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

9.8CVSS7.2AI score0.32212EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•3 views

CVE-2022-25148: Improper Neutralization of Special Elements used in an SQL Command

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpageid parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

9.8CVSS7.7AI score0.8093EPSS
SaveExploits4References3
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

mystats (hits.php) Multiple Vulnerabilities exploit

No description provided by source. myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

7.1AI score
SaveExploits0
NVD
NVD
•added 2008/10/22 12:11 a.m.•24 views

CVE-2008-4643

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

7.5CVSS8.4AI score0.01003EPSS
SaveExploits2References5
NVD
NVD
•added 2008/10/22 12:11 a.m.•33 views

CVE-2008-4644

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header...

7.5CVSS6.6AI score0.02647EPSS
SaveExploits1References5
Prion
Prion
•added 2008/10/22 12:11 a.m.•28 views

Sql injection

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

7.5CVSS9.1AI score0.01003EPSS
SaveExploits2References5
CVE
CVE
•added 2008/10/21 10:00 p.m.•60 views

CVE-2008-4643

CVE-2008-4643 describes an SQL injection vulnerability in hits.php of the myWebland myStats module. The sortby parameter is exploitable by remote attackers to execute arbitrary SQL commands. The document set confirms the vulnerability and CVE details but does not provide exploitation data or a do...

7.5CVSS8.4AI score0.01003EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2008/10/21 10:00 p.m.•69 views

CVE-2008-4644

CVE-2008-4644 affects hits.php in the myWebland myStats component, where remote attackers can bypass IP address restrictions by tampering with the X-Forwarded-For HTTP header. The vulnerability is triggered by trusting a manipulated X-Forwarded-For value, allowing bypass of access controls intend...

7.5CVSS6.6AI score0.02647EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2008/10/21 10:00 p.m.•36 views

CVE-2008-4643

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

8.4AI score0.01003EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•6 views

CVE-2008-4644: Undefined Security Weakness

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header...

7.5CVSS5.8AI score0.02647EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•6 views

CVE-2008-4643: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

7.5CVSS6.4AI score0.01003EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/10/17 12:00 a.m.•28 views

mystats-multi.txt

myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible for...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/10/15 12:00 a.m.•25 views

mystats - hits.php Multiple Vulnerabilities

mystats - hits.php Multiple Vulnerabilities myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your...

0.1AI score
SaveExploits0
zdt
zdt
•added 2008/10/15 12:00 a.m.•27 views

myStats (hits.php) Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit url:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/10/15 12:00 a.m.•47 views

mystats - 'hits.php' Multiple Vulnerabilities

myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible for...

7.5CVSS5.8AI score0.02647EPSS
SaveExploits2
Cvelist
Cvelist
•added 2005/03/07 5:00 a.m.•28 views

CVE-2005-0656

Multiple cross-site scripting XSS vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 hits parameter to hits.php, 2 query parameter to index.php, or 3 theCount parameter to counter.php...

5.8AI score0.01255EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/07 12:00 a.m.•3 views

CVE-2005-0656: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 hits parameter to hits.php, 2 query parameter to index.php, or 3 theCount parameter to counter.php...

4.3CVSS5.9AI score0.01255EPSS
SaveExploits1References1
Rows per page
Query Builder