Lucene search
+L

38 matches found

CVE
CVE
•added 2008/06/24 7:00 p.m.•51 views

CVE-2008-2834

CVE-2008-2834 affects the Scientific Image DataBase 0.41. The vulnerability is in the file projects.php, where the id parameter is not properly handled, allowing a SQL injection. This enables remote attackers to execute arbitrary SQL commands via the id input. No remediation or patch information ...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2008/06/24 7:00 p.m.•39 views

CVE-2008-2834

SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00967EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/24 12:00 a.m.•10 views

CVE-2008-2834: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/06/21 12:00 a.m.•29 views

Scientific Image DataBase 0.41 - Blind SQL Injection

Scientific Image DataBase 0.41 - Blind SQL Injection !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr,...

0.6AI score
SaveExploits0
zdt
zdt
•added 2008/06/21 12:00 a.m.•44 views

Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Scientific Image DataBase ; my $substr, $done, $chr, $res = 1, 1, 48, ""; my $ua = LWP::UserAgent-new agent = 'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1', cookiejar = ;...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/06/21 12:00 a.m.•48 views

Scientific Image DataBase 0.41 - Blind SQL Injection

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr, $res = 1, 1, 48, ""; my $ua = LWP::UserAgent-new agen...

7.5CVSS5.8AI score0.00967EPSS
SaveExploits2
exploitpack
exploitpack
•added 2008/03/07 12:00 a.m.•24 views

Specimen Image Database - taxonservice.php?dir Remote File Inclusion

Specimen Image Database - taxonservice.php?dir Remote File Inclusion source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/03/07 12:00 a.m.•32 views

Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying...

6.8CVSS5.8AI score0.01924EPSS
SaveExploits3
NVD
NVD
•added 2006/10/20 2:07 p.m.•34 views

CVE-2006-5419

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...

7.5CVSS7.5AI score0.02771EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2006/10/20 10:00 a.m.•35 views

CVE-2006-5419

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...

7.5AI score0.02771EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/20 12:00 a.m.•14 views

CVE-2006-5419: Undefined Security Weakness

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database SID, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter...

7.5CVSS6.4AI score0.02771EPSS
SaveExploits2References1
seebug.org
seebug.org
•added 2006/10/16 12:00 a.m.•27 views

Specimen Image Database (client.php) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- SID - dir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net ...

7.1AI score
SaveExploits0
zdt
zdt
•added 2006/10/16 12:00 a.m.•36 views

Specimen Image Database (client.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Specimen Image Database client.php Remote File Include Vulnerability ======================================================================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/10/16 12:00 a.m.•25 views

Specimen Image Database - client.php Remote File Inclusion

Specimen Image Database - client.php Remote File Inclusion --------------------------------------------------------------------------- SID - dir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Tea...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/10/16 12:00 a.m.•47 views

Specimen Image Database - 'client.php' Remote File Inclusion

--------------------------------------------------------------------------- SID - dir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critical Level :...

7.5CVSS5.8AI score0.02771EPSS
SaveExploits4
CVE
CVE
•added 2003/03/18 5:00 a.m.•74 views

CVE-2002-1554

CVE-2002-1554 affects Cisco ONS15454 and ONS15327 running ONS before 3.4. The issue is that usernames and passwords are stored in cleartext in the image database for the TCC, TCC+ or XTC, which could allow an attacker to gain privileges by extracting passwords from the image database or a backup....

4.6CVSS6.8AI score0.00357EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2003/03/18 5:00 a.m.•47 views

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

6.8AI score0.00357EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/03/18 12:00 a.m.•12 views

CVE-2002-1554: Undefined Security Weakness

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

4.6CVSS5.9AI score0.00357EPSS
SaveExploits0References1
Rows per page
Query Builder