Lucene search
+L

7078 matches found

exploitpack
exploitpack
•added 2006/03/22 12:00 a.m.•18 views

1WebCalendar 4.0 - newsnewsView.cfm?NewsID SQL Injection

1WebCalendar 4.0 - newsnewsView.cfm?NewsID SQL Injection source: https://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

8.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/03/22 12:00 a.m.•26 views

1WebCalendar 4.0 - 'mainCal.cfm' SQL Injection

source: https://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

5CVSS5.8AI score0.01779EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2006/03/22 12:00 a.m.•119 views

1WebCalendar 4.0 - 'viewEvent.cfm?EventID' SQL Injection

source: https://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

5CVSS5.8AI score0.01779EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2006/03/15 12:00 a.m.•29 views

DSDownload 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17116/info DSDownload is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQL logic into the vulnerable paramete...

7.5CVSS5.8AI score0.05854EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2006/03/08 12:00 a.m.•46 views

TotalECommerceSQL.txt

--Security Report-- Advisory: TotalECommerce index.asp id Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 04/03/06 04:36 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: TotalECommerce...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/03/07 12:00 a.m.•21 views

LoudBlog 0.41 - podcast.php SQL Injection

LoudBlog 0.41 - podcast.php SQL Injection source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow...

SaveExploits0
Exploit DB
Exploit DB
•added 2006/03/07 12:00 a.m.•37 views

LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

6.4CVSS5.8AI score0.03322EPSS
SaveExploits3
exploitpack
exploitpack
•added 2006/03/07 12:00 a.m.•20 views

LoudBlog 0.41 - backend_settings.php Traversal Arbitrary File Access

LoudBlog 0.41 - backendsettings.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/03/07 12:00 a.m.•54 views

LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

6.4CVSS5.8AI score0.03322EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2006/03/07 12:00 a.m.•40 views

LoudBlog 0.41 - 'podcast.php' SQL Injection

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

5CVSS5.8AI score0.01278EPSS
SaveExploits2
Prion
Prion
•added 2006/03/03 11:02 a.m.•24 views

Default configuration

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

7.8CVSS7.3AI score0.59508EPSS
SaveExploits2References3Affected Software2
NVD
NVD
•added 2006/03/03 11:02 a.m.•46 views

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

5CVSS6.6AI score0.58033EPSS
SaveExploits2References4
OSV
OSV
•added 2006/03/03 11:02 a.m.•19 views

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

6.9AI score
SaveExploits0References5
OSV
OSV
•added 2006/03/03 11:02 a.m.•9 views

DEBIAN-CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

5CVSS8.2AI score0.58033EPSS
SaveExploits2References1
Prion
Prion
•added 2006/03/03 11:02 a.m.•48 views

Default configuration

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

5CVSS6.8AI score0.58033EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2006/03/03 11:02 a.m.•28 views

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

7.8CVSS6.8AI score0.59508EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2006/03/03 11:00 a.m.•38 views

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

6.8AI score0.59508EPSS
SaveExploits2References3
CVE
CVE
•added 2006/03/03 11:00 a.m.•140 views

CVE-2006-0988

CVE-2006-0988 : The default configuration of the DNS Server on Windows Server 2003/2000 and Microsoft DNS Server on Windows NT 4.0 permits recursive queries and reveals delegation information to arbitrary IPs, enabling remote attackers to cause a denial of service (traffic amplification) via spoo...

7.8CVSS6.8AI score0.59508EPSS
SaveExploits2References3Affected Software3
CVE
CVE
•added 2006/03/03 11:00 a.m.•16861 views

CVE-2006-0987

CVE-2006-0987 affects ISC BIND configured as a caching DNS server, where the default setup before 9.4.1-P1 allows recursive queries and leaks delegation information to arbitrary IPs, enabling remote attackers to trigger traffic amplification and a denial of service via spoofed DNS queries. The co...

5CVSS9.1AI score0.58033EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
•added 2006/03/03 11:00 a.m.•95 views

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...

5CVSS8.8AI score0.58033EPSS
SaveExploits2
Rows per page
Query Builder