Lucene search
+L

3629 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/09 12:00 a.m.•11 views

CVE-2006-6911: Undefined Security Weakness

SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users to execute arbitrary SQL commands via the ordernum parameter...

6CVSS6.4AI score0.0094EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2006/08/08 12:00 a.m.•53 views

Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper handling of CSS...

7.5CVSS4AI score0.41112EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2006/06/13 12:00 a.m.•25 views

CEScripts (Multiple Scripts) - Cross-Site Scripting

CEScripts Multiple Scripts - Cross-Site Scripting source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/06/13 12:00 a.m.•35 views

CEScripts (Multiple Scripts) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

6.8CVSS5.8AI score0.01842EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2006/04/14 3:54 p.m.•16 views

security flaw

Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that results in a negative array index...

9.3CVSS7.8AI score0.07968EPSS
SaveExploits0References4
CVE
CVE
•added 2005/04/03 5:00 a.m.•67 views

CVE-2005-0946

CVE-2005-0946 affects phpCOIN 1.2.1b and earlier, with SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Affected input surfaces include the term/keywords field on search, username or e-mail on forgot password, and domain name on the new package ordering...

7.5CVSS8.5AI score0.01198EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2005/04/03 5:00 a.m.•46 views

CVE-2005-0946

SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the 1 term/keywords field on the search page, 2 username or 3 e-mail field on the forgot password page, or 4 domain name on the ordering new package page...

8.5AI score0.01198EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/03 12:00 a.m.•6 views

CVE-2005-0946: Undefined Security Weakness

SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the 1 term/keywords field on the search page, 2 username or 3 e-mail field on the forgot password page, or 4 domain name on the ordering new package page...

7.5CVSS6.4AI score0.01198EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/09/21 12:00 a.m.•7 views

CVE-2000-0713: Undefined Security Weakness

Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier...

7.6CVSS6.3AI score0.04882EPSS
SaveExploits0References1
Rows per page
Query Builder