Lucene search
K

35 matches found

NVD
NVD
added 2020/03/23 10:15 p.m.9 views

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

9.8CVSS9.7AI score0.86178EPSS
Exploits3References2
OSV
OSV
added 2020/03/23 10:15 p.m.0 views

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

9.8CVSS7.3AI score
Exploits0References2
Cvelist
Cvelist
added 2020/03/23 9:44 p.m.11 views

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

9.7AI score0.86178EPSS
Exploits3References2
ossfuzz
ossfuzz
added 2018/03/03 9:19 p.m.14 views

open62541/fuzz_binary_message: Heap-use-after-free in NodeId_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5776306856787968 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

6.7AI score
Exploits0Affected Software1
NVD
NVD
added 2014/10/30 2:55 p.m.17 views

CVE-2014-3446

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

7.5CVSS8.3AI score0.00397EPSS
Exploits1References4
Prion
Prion
added 2014/10/30 2:55 p.m.17 views

Sql injection

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter...

7.5CVSS9AI score0.00397EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2013/05/10 9:55 p.m.12 views

CVE-2013-3522

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

6.5CVSS7.8AI score0.56348EPSS
Exploits9References2
Prion
Prion
added 2013/05/10 9:55 p.m.19 views

Sql injection

SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter...

6.5CVSS8.5AI score0.56348EPSS
Exploits9References2Affected Software1
seebug.org
seebug.org
added 2013/04/08 12:0 a.m.10 views

VBulletin 'nodeid'参数SQL注入漏洞

BUGTRAQ ID: 58754 vBulletin是一个强大灵活并可完全根据自己的需要定制的论坛程序套件。 VBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28及其他版本在 'nodeid' 参数的实现上存在SQL注入漏洞,攻击者可利用此漏洞破坏应用,执行未授权操作。 0 VBulletin 厂商补丁: VBulletin --------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.vbulletin.com/ !/usr/bin/perl use LWP::UserAgent;...

6.9AI score
Exploits0
NVD
NVD
added 2009/06/22 2:30 p.m.8 views

CVE-2009-2145

Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...

4.3CVSS5.5AI score0.02646EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2009/06/22 2:30 p.m.1 views

CVE-2009-2145

Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...

4.3CVSS5.4AI score0.02646EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/06/22 2:0 p.m.16 views

CVE-2009-2145

Multiple cross-site scripting XSS vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the a NodeID and b action parameters to the default URI, and the c NodeID parameter to the default URI for the admin section; and allow remote authenticated users...

5.5AI score0.02646EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2009/06/14 12:0 a.m.26 views

Translucid 1.75 XSS / HTML Injection

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2009/06/12 12:0 a.m.32 views

TransLucid 1.75 - Multiple Vulnerabilities

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...

7.4AI score
Exploits0
0day.today
0day.today
added 2009/06/12 12:0 a.m.20 views

TransLucid 1.75 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== TransLucid 1.75 Multiple Remote Vulnerabilities =============================================== transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75...

7.1AI score
Exploits0
Rows per page
Query Builder