5891 matches found
Evenzia CMS XSS
Application: Evenzia CMS Vendors Url: http://www.evenzia.com Bug Type: Cross-Site Script Exploitation: Remote Introduction: Evenzia CMS is a web-based CMS system Google Dork: "Powered By eVenzia CMS" || "Developed By eVenzia" PoC:...
CVE-2006-1496
CVE-2006-1496 describes multiple cross-site scripting (XSS) vulnerabilities in ViHor Design’s index.php. The vulnerability arises from the vulnerable page parameter being used in two ways: (1) as a remote URL supplied to fopen, and (2) as HTML or script content that is echoed back to the client i...
CVE-2001-1215
PFinger 0.7.5–0.7.7 is affected by a format-string vulnerability in .plan files that allows remote code execution. The issue arises from format specifiers used in a .plan, enabling an attacker to execute arbitrary code on affected systems. Affected component: PFinger (versions 0.7.5–0.7.7). Root ...
CVE-2001-1050
CVE-2001-1050 affects CCCSoftware CCC PHP script. The vulnerability arises from an HTTP request that sets the includedir variable, enabling remote attackers to include arbitrary files from remote web sites (remote file inclusion). The available documents do not specify affected versions, exact ro...
CVE-2001-0255
FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...
CVE-2025-3460
creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2025-06-08 18:58:51+00:00| seen| http://takeonme.org/cves/cve-2025-3460/ 2025-06-08 22:04:34+00:00| published-proof-of-concept| Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4 2025-06-08...
CVE-2000-1104
CVE-2000-1104 is a variant of the IIS Cross-Site Scripting vulnerability described in MS00-060 (CVE-2000-0746). The vulnerability affects Microsoft IIS 4.0 and 5.0, where a malicious site can embed scripts in a link to a trusted site, which are returned unquoted in an error message and executed i...
CVE-2000-0999
Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.
CVE-2000-0176
The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...
CVE-1999-0618
CVE-1999-0618 relates to the rexec/rexecd service being active. The provided sources identify rexecd as vulnerable due to weak authentication, enabling remote command execution with high impact (C/C/I/A = complete) and a CVSS v2 base score of 10.0 (network vector, low attack complexity, no auth)....