Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-5987

Malware in sbrugna...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References4
OSV
OSV
•added 2020/06/08 5:15 p.m.•12 views

CVE-2020-5304

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

7.5CVSS5.8AI score0.00995EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/06/08 5:15 p.m.•11 views

CVE-2020-5304

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

7.5CVSS7.5AI score0.00995EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/06/08 4:12 p.m.•31 views

CVE-2020-5304

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

7.5AI score0.00995EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/08 12:00 a.m.•4 views

CVE-2020-5304: Improper Encoding or Escaping of Output

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

7.5CVSS5.8AI score0.00995EPSS
SaveExploits0References2
NVD
NVD
•added 2009/02/02 10:00 p.m.•37 views

CVE-2008-6017

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

7.5CVSS8.4AI score0.00973EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2009/02/02 9:29 p.m.•40 views

CVE-2008-6017

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

8.4AI score0.00973EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/02 12:00 a.m.•4 views

CVE-2008-6017: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2005/12/06 11:00 a.m.•34 views

CVE-2005-4038

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter...

8.4AI score0.01333EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/06 12:00 a.m.•5 views

CVE-2005-4038: Undefined Security Weakness

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter...

7.5CVSS6.4AI score0.01333EPSS
SaveExploits0References1
Rows per page
Query Builder