Lucene search
+L

48 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/04 12:00 a.m.•3 views

CVE-2008-6050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tech Articles comtecharticle 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php...

7.5CVSS6.4AI score0.00931EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/03 12:00 a.m.•5 views

CVE-2008-4423: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action...

6.5CVSS6.4AI score0.01094EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/10 12:00 a.m.•3 views

CVE-2008-2634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/04 12:00 a.m.•7 views

CVE-2007-2507: Undefined Security Weakness

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...

7.8CVSS6AI score0.03476EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/13 12:00 a.m.•2 views

CVE-2006-4737: Undefined Security Weakness

SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2...

7.5CVSS6.1AI score0.01192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/16 12:00 a.m.•3 views

CVE-2006-0217: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

4.3CVSS5.9AI score0.02162EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/20 12:00 a.m.•4 views

CVE-2005-4404: Undefined Security Weakness

SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

7.5CVSS6.5AI score0.01111EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•5 views

CVE-2002-0823: Undefined Security Weakness

Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control HHCtrl.ocx with a long pathname in the Item parameter...

7.5CVSS6.6AI score0.26175EPSS
SaveExploits1References1
Rows per page
Query Builder