Lucene search
+L

5 matches found

NVD
NVD
•added 2009/10/01 3:30 p.m.•27 views

CVE-2009-3520

Cross-site request forgery CSRF vulnerability in the Youraccount module in CMSphp 0.21 allows remote attackers to hijack the authentication of administrators for requests that change an administrator password via the pseudo, pwd, and uid parameters in an admininfouserverif action...

8.8CVSS9.1AI score0.00646EPSS
SaveExploits1References2
NVD
NVD
•added 2007/09/18 8:17 p.m.•30 views

CVE-2007-4956

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...

7.5CVSS8.3AI score0.0353EPSS
SaveExploits3References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/12 12:00 a.m.•8 views

CVE-2007-2000: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter...

7.5CVSS6.4AI score0.01037EPSS
SaveExploits1References2
NVD
NVD
•added 2006/01/25 11:03 a.m.•24 views

CVE-2006-0415

Cross-site scripting XSS vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter...

4.3CVSS5.7AI score0.01736EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/25 12:00 a.m.•8 views

CVE-2006-0415: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter...

4.3CVSS6AI score0.01736EPSS
SaveExploits2References1
Rows per page
Query Builder