Lucene search
K

23 matches found

ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2018-25422

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

8.8CVSS6.1AI score0.0007EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2017/06/29 2:11 p.m.8 views

cristobalpazmino.com XSS vulnerability

Vulnerable URL: http://www.cristobalpazmino.com/play.php?son=COLIZOCO.mp3=1"...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2015/12/08 2:32 a.m.11 views

hd.koomovie.com XSS vulnerability

Vulnerable URL: http://hd.koomovie.com/play.php?movie=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

6.3AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.82 views

Eyeland Studio Inc. SQL Injection Vulnerability

No description provided by source. Title: Eyeland Studio Inc. SQL Injection Vulnerability Version: 2.0 Author: Mr.P3rfekT Software Site:http://www.eyeland.com/ Tested on Lunix CVE : N/A Home :www.realmadridsy.com & www.v4-team.com/cc Founded By Mr.P3rfekT Dork :Eyeland Studio Inc. All Rights...

7.1AI score
Exploits0
NVD
NVD
added 2013/07/29 11:27 p.m.11 views

CVE-2013-4953

SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

7.5CVSS8.4AI score0.00555EPSS
Exploits1References2
exploitpack
exploitpack
added 2012/08/06 12:0 a.m.10 views

YT-Videos Script - id SQL Injection

YT-Videos Script - id SQL Injection source: https://www.securityfocus.com/bid/54859/info YT-Videos Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromi...

Exploits0
Packet Storm
Packet Storm
added 2010/12/07 12:0 a.m.20 views

WWWThreads Cross Site Scripting

www.eVuln.com advisory: XSS vulnerability in WWWThreads php version Summary: http://evuln.com/vulns/155/summary.html Details: http://evuln.com/vulns/155/description.html -----------Summary----------- eVuln ID: EV0155 Software: n/a Vendor: WWWThreads Version: 2006.11.25 Critical Level: low Type:...

7.4AI score
Exploits0
0day.today
0day.today
added 2010/06/10 12:0 a.m.31 views

mktba 4.3 => (play.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== mktba 4.3 = play.php SQL Injection Vulnerability =================================================== Title : mktba 4.3 play.php ? SQL Injection Vulnerability Version : 4.3 Author : MR.SoOoFe...

7.1AI score
Exploits0
Prion
Prion
added 2008/07/10 5:41 p.m.21 views

Sql injection

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

7.5CVSS9.1AI score0.00414EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2008/07/10 5:41 p.m.8 views

CVE-2008-3118

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

7.5CVSS8.4AI score0.00414EPSS
Exploits0References3
Cvelist
Cvelist
added 2008/07/10 5:0 p.m.12 views

CVE-2008-3118

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

8.4AI score0.00414EPSS
Exploits0References3
Exploit DB
Exploit DB
added 2008/06/25 12:0 a.m.35 views

PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload

= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273...

7.4AI score
Exploits0
Prion
Prion
added 2008/05/21 1:24 p.m.5 views

Sql injection

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00462EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2008/05/21 10:0 a.m.12 views

CVE-2008-2393

SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00462EPSS
Exploits1References4
seebug.org
seebug.org
added 2008/05/21 12:0 a.m.17 views

EntertainmentScript (play.php id) Remote SQL Injection Vulnerability

No description provided by source. rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email :...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2008/05/19 12:0 a.m.29 views

EntertainmentScript 1.4.0 - 'play.php' SQL Injection

rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rK :: : not found -:: SQL :...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/05/19 12:0 a.m.20 views

EntertainmentScript 1.4.0 - play.php SQL Injection

EntertainmentScript 1.4.0 - play.php SQL Injection rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM...

0.6AI score
Exploits0
0day.today
0day.today
added 2008/05/19 12:0 a.m.60 views

EntertainmentScript (play.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== EntertainmentScript play.php id Remote SQL Injection Vulnerability ==================================================================== rEm0te SQL Injection Vulnerability...

7.1AI score
Exploits0
CVE
CVE
added 2007/12/04 3:0 p.m.37 views

CVE-2007-6215

CVE-2007-6215 involves Web-MeetMe 3.0.3, where the PHP script play.php is vulnerable to directory traversal via user-supplied inputs in the roomNo and possibly bookid parameters. This can allow remote attackers to read arbitrary files on the server, exposing partial confidentiality (per the cited...

5CVSS7AI score0.0382EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2007/09/17 5:17 p.m.10 views

Sql injection

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php. NOTE: some details are obtained from third party information...

6.5CVSS8.2AI score0.00599EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder