CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1281 matches found

Exploit DB•added 2010/02/24 12:00 a.m.•19 views

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...

5.8AI score

SaveExploits0

securityvulns•added 2010/02/22 12:00 a.m.•25 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References6Affected Software2

securityvulns•added 2010/02/16 12:00 a.m.•26 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References5Affected Software2

exploitpack•added 2010/02/12 12:00 a.m.•18 views

Izumi 1.1.0 - Multiple Local File Inclusion Remote File Inclusions

Izumi 1.1.0 - Multiple Local File Inclusion Remote File Inclusions + Izumi + Download : http://sourceforge.net/projects/izumi/files/ + Code : page.php requireonce$dirinstall . $dirsrc . "common.php"; + Example : x RFI : Izumipath/src/page.php?dirinstall=Shell x LFI :...

0.3AI score

SaveExploits0

securityvulns•added 2010/02/08 12:00 a.m.•44 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits3References6Affected Software2

securityvulns•added 2010/02/04 12:00 a.m.•99 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

6.8CVSS1.6AI score0.03373EPSS

SaveExploits0References16Affected Software7

securityvulns•added 2010/01/28 12:00 a.m.•31 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.03353EPSS

SaveExploits1References2Affected Software2

securityvulns•added 2010/01/26 12:00 a.m.•62 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.01391EPSS

SaveExploits0References4Affected Software2

securityvulns•added 2010/01/23 12:00 a.m.•42 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.10612EPSS

SaveExploits1References5Affected Software3

securityvulns•added 2010/01/21 12:00 a.m.•28 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References3Affected Software1

securityvulns•added 2010/01/17 12:00 a.m.•29 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References4Affected Software2

securityvulns•added 2010/01/07 12:00 a.m.•44 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.09996EPSS

SaveExploits14References2Affected Software2

securityvulns•added 2010/01/05 12:00 a.m.•26 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References4Affected Software3

securityvulns•added 2009/12/29 12:00 a.m.•35 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

4.3CVSS1.6AI score0.01089EPSS

SaveExploits0References5Affected Software3

securityvulns•added 2009/12/23 12:00 a.m.•37 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.6AI score

SaveExploits0References3Affected Software3

securityvulns•added 2009/12/21 12:00 a.m.•92 views

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.6AI score0.03285EPSS

SaveExploits4References7Affected Software6

exploitpack•added 2009/12/19 12:00 a.m.•17 views

Ptag 4.0.0 - Multiple Remote File Inclusions

Ptag 4.0.0 - Multiple Remote File Inclusions Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC...

0.4AI score

SaveExploits0

Exploit DB•added 2009/12/19 12:00 a.m.•36 views

Saurus CMS 4.6.4 - Multiple Remote File Inclusions

Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce $classpath."excel/class.writeexcelbiffwriter.inc.php"; requireonce...

5.8AI score

SaveExploits0

Exploit DB•added 2009/12/19 12:00 a.m.•34 views

Ptag 4.0.0 - Multiple Remote File Inclusions

Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC Ptagpath/lib/session.php?ptagdir=Shell Code sql.php...

5.8AI score

SaveExploits0

Exploit DB•added 2009/12/19 12:00 a.m.•34 views

FestOs 2.2.1 - Multiple Remote File Inclusions

Exploit Title: FestOs $reports header"Location:index.php"; include "includes/reportheader.php"; ? 3xplo!t : festospath/admin/reportsplacement.php?ABSOLUTEFILEPATH=Shell Code : FestOS.php requireonce$config'ABSOLUTEFILEPATH'."core/sessions.php"; 3xplo!t :...

5.8AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by