Lucene search
+L

9061 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/20 12:00 a.m.•2 views

CVE-2005-4353: Undefined Security Weakness

SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01198EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/20 12:00 a.m.•3 views

CVE-2005-4416: Undefined Security Weakness

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01181EPSS
SaveExploits2References1
NVD
NVD
•added 2005/12/17 11:03 a.m.•17 views

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

4.3CVSS5.7AI score0.01752EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/17 12:00 a.m.•4 views

CVE-2005-4328: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

4.3CVSS6AI score0.01752EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/17 12:00 a.m.•4 views

CVE-2005-4312: Undefined Security Weakness

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/17 12:00 a.m.•5 views

CVE-2005-4313: Undefined Security Weakness

SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/16 12:00 a.m.•6 views

CVE-2005-4277: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS6AI score0.01444EPSS
SaveExploits1References1
NVD
NVD
•added 2005/12/15 11:03 a.m.•18 views

CVE-2005-4264

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

7.5CVSS8.8AI score0.01333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2005/12/15 11:00 a.m.•45 views

CVE-2005-4264

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

8.8AI score0.01333EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/15 12:00 a.m.•4 views

CVE-2005-4264: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields, and 3 id parameter...

7.5CVSS6.4AI score0.01333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/15 12:00 a.m.•5 views

CVE-2005-4254: Undefined Security Weakness

SQL injection vulnerability in viewResults.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/14 12:00 a.m.•8 views

CVE-2005-4234: Undefined Security Weakness

SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/14 12:00 a.m.•6 views

CVE-2005-4246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php and 2 page parameter...

7.5CVSS6.4AI score0.01136EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/13 12:00 a.m.•2 views

CVE-2005-4208: Undefined Security Weakness

Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. dot dot and null byte %00 in the id parameter of the read module...

5CVSS6AI score0.08108EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/11 12:00 a.m.•3 views

CVE-2005-4164: Undefined Security Weakness

SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01243EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/07 12:00 a.m.•4 views

CVE-2005-4058: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php...

7.5CVSS6.4AI score0.01243EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/05 12:00 a.m.•4 views

CVE-2005-4011: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar aka PHP Event Calendar 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.02365EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2005/12/04 10:00 p.m.•30 views

CVE-2005-3988

SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01162EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/04 12:00 a.m.•3 views

CVE-2005-3988: Undefined Security Weakness

SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2005/12/01 11:00 a.m.•41 views

CVE-2005-3961

exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...

6.3AI score0.02161EPSS
SaveExploits0References11
Rows per page
Query Builder