Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/07/13 12:00 a.m.•4 views

CVE-2010-2717: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in manager/login.php in CruxSoftware CruxCMS 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the txtusername parameter...

4.3CVSS6AI score0.01062EPSS
SaveExploits1References2
CVE
CVE
•added 2009/05/07 5:00 p.m.•56 views

CVE-2008-6796

CVE-2008-6796 is a SQL injection vulnerability affecting Pre Projects Pre Real Estate Listings, specifically in the login script (manager/login.php). The vulnerability allows remote attackers to inject arbitrary SQL via the username1 parameter (also referred to as Admin/Username field), enabling ...

7.5CVSS6.6AI score0.00973EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/07 12:00 a.m.•4 views

CVE-2008-6796: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Rows per page
Query Builder