Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2009/01/02 6:00 p.m.•36 views

CVE-2008-5818

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

7.1AI score0.01955EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/02 12:00 a.m.•4 views

CVE-2008-5818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

6.8CVSS6.3AI score0.01955EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/02 12:00 a.m.•4 views

CVE-2008-5819: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

6.8CVSS6.3AI score0.01931EPSS
SaveExploits1References2
Prion
Prion
•added 2008/05/09 6:20 p.m.•21 views

Sql injection

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

7.5CVSS9.1AI score0.00973EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2008/05/09 6:00 p.m.•35 views

CVE-2008-2124

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

8.4AI score0.00973EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/09 12:00 a.m.•6 views

CVE-2008-2124: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Rows per page
Query Builder