Lucene search
K

9080 matches found

exploitpack
exploitpack
added 2006/02/25 12:0 a.m.13 views

D3Jeeb Pro 3 - fastlinks.php?catid SQL Injection

D3Jeeb Pro 3 - fastlinks.php?catid SQL Injection source: https://www.securityfocus.com/bid/16853/info D3Jeeb is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/18 12:0 a.m.19 views

Webpagecity WPC easy - SQL Injection

source: https://www.securityfocus.com/bid/16721/info Webpagecity 'WPC.easy' is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2006/02/18 12:0 a.m.45 views

libapreq library DoS

Incorrect functions "apreqparseheaders" and "apreqparseurlencoded" implementation...

3AI score
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2006/02/16 12:0 a.m.31 views

honeyd security advisory: remote detection

Honeyd Security Advisory 2006-001 ================================= Topic: Remote Detection Via Multiple Probe Packets Version: All versions prior to Honeyd 1.5 Severity: Identification of Honeyd installations allows an adversary to launch attacks specifically against Honeyd. No remote root explo...

1.5AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2006/02/15 12:0 a.m.41 views

GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

6.4CVSS6.2AI score0.07229EPSS
Exploits0References7
Packet Storm
Packet Storm
added 2006/02/14 12:0 a.m.41 views

dotProject-2.0.1.txt

dotproject Date: Feb. 14 2006 Vendor: dotproject.net contacted Description: dotProject is a volunteer supported Project Management application. Details: The 'protection.php' script does not properly validate user-supplied input in the 'siteurl' parameter. Some user-supplied input is not checked...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.9 views

sNews - index.php Multiple SQL Injections

sNews - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16647/info sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...

0.4AI score
Exploits0
exploitpack
exploitpack
added 2006/02/11 12:0 a.m.11 views

HiveMail 1.2.21.3 - addressbook.update.php?contactgroupid Arbitrary PHP Command Execution

HiveMail 1.2.21.3 - addressbook.update.php?contactgroupid Arbitrary PHP Command Execution source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL...

0.6AI score
Exploits0
exploitpack
exploitpack
added 2006/02/11 12:0 a.m.18 views

HiveMail 1.2.21.3 - index.php $_SERVER[PHP_SELF] Cross-Site Scripting

HiveMail 1.2.21.3 - index.php $SERVERPHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP...

Exploits0
Exploit DB
Exploit DB
added 2006/02/08 12:0 a.m.33 views

Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection

source: https://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker t...

7.4AI score
Exploits0
Prion
Prion
added 2006/02/02 11:6 p.m.17 views

Design/Logic Flaw

The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin...

6.4CVSS6.3AI score0.01447EPSS
Exploits0References12Affected Software3
CVE
CVE
added 2006/02/02 11:0 p.m.59 views

CVE-2006-0299

CVE-2006-0299 affects Mozilla Firefox up to 1.5.0.1, Thunderbird 1.5 (when JavaScript runs in mail), and SeaMonkey before 1.0. The issue arises from the E4X implementation exposing the internal AnyName object to external interfaces, allowing multiple cooperating domains to exchange information an...

6.4CVSS5.8AI score0.01447EPSS
Exploits0References12Affected Software3
exploitpack
exploitpack
added 2006/02/01 12:0 a.m.9 views

SZUserMgnt 1.4 - Username SQL Injection

SZUserMgnt 1.4 - Username SQL Injection source: https://www.securityfocus.com/bid/16454/info SZUserMgnt is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

8.6AI score
Exploits0
myhack58
myhack58
added 2006/02/01 12:0 a.m.16 views

Programming cheats: the C language efficient four trick-vulnerability warning-the black bar safety net

Writing efficient and simple C language code, many software engineers are pursuing. This article is for the programming work of some of the experience and experience to do the relevant elaboration. The first trick: to space for time Computer program the greatest paradox in space and time the...

7.3AI score
Exploits0
myhack58
myhack58
added 2006/01/31 12:0 a.m.20 views

With a Winsock implementation on the website of the database data injection-vulnerability warning-the black bar safety net

In writing this article before, it is necessary to"inject"one word describes it. The difference to the usualSQL injection, where the injection actually just construct an HTTP request packet to a program instead of a WEB page is submitted, data is automatically submitted. Hey, speaking of which, I...

7.2AI score
Exploits0
Exploit DB
Exploit DB
added 2006/01/29 12:0 a.m.25 views

UBBCentral UBB.Threads 6.3 - 'showflat.php' SQL Injection

source: https://www.securityfocus.com/bid/16520/info UBB.Threads is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise th...

7AI score
Exploits0
exploitpack
exploitpack
added 2006/01/26 12:0 a.m.10 views

AndoNET Blog 2004.9.2 - Comentarios.php SQL Injection

AndoNET Blog 2004.9.2 - Comentarios.php SQL Injection source: https://www.securityfocus.com/bid/16393/info AndoNET Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...

Exploits0
Exploit DB
Exploit DB
added 2006/01/24 12:0 a.m.16 views

miniBloggie 1.0 - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/16367/info miniBloggie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2006/01/23 12:0 a.m.18 views

e-moBLOG 1.3 - Multiple SQL Injections

e-moBLOG 1.3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16344/info The e-moBLOG application is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

0.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2006/01/21 12:0 a.m.41 views

Ubuntu 4.10 / 5.04 / 5.10 : apache2, apache vulnerabilities (USN-241-1)

The 'modimap' module which provides support for image maps did not properly escape the 'referer' URL which rendered it vulnerable against a cross-site scripting attack. A malicious web page or HTML email could trick a user into visiting a site running the vulnerable modimap, and employ...

5.4CVSS6.4AI score0.43464EPSS
Exploits1References2
Rows per page
Query Builder