Lucene search
+L

46 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/22 12:00 a.m.•4 views

CVE-2004-2677: Undefined Security Weakness

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP qwik-smtpd 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the 1 clientRcptTo array, and the 2 Received and 3 messageID variables, possibly involving HELO and hostname arguments...

7.5CVSS6.6AI score0.06483EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2006/02/18 2:00 a.m.•39 views

CVE-2006-0757

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

8AI score0.03231EPSS
SaveExploits3References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•3 views

CVE-2005-3870: Undefined Security Weakness

Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 table and 2 messageID parameters...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•4 views

CVE-2005-3875: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in 1 send.php or 2 a delete action in messages.php...

7.5CVSS6.4AI score0.01244EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/20 12:00 a.m.•4 views

CVE-2004-1674: Undefined Security Weakness

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to 1 delete arbitrary files via the originalfolder parameter or 2 move arbitrary files via the messageid parameter...

7.5CVSS6AI score0.01549EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/10 12:00 a.m.•3 views

CVE-2005-0292: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry phpGiftReg 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the 1 messageid, 2 shopper, 3 shopfor, or 4 itemid parameters...

7.5CVSS6.4AI score0.0153EPSS
SaveExploits1References1
Rows per page
Query Builder