Lucene search
+L

103 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/16 12:00 a.m.•10 views

CVE-2006-3052: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the 1 eventid parameter to view-event-details.php or 2 selectevents parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details...

6.8CVSS6AI score0.01842EPSS
SaveExploits1References1
NVD
NVD
•added 2005/12/11 2:03 a.m.•24 views

CVE-2005-4155

registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treat...

7.5CVSS8AI score0.02678EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/11 12:00 a.m.•6 views

CVE-2005-4155: Undefined Security Weakness

registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treat...

7.5CVSS6.4AI score0.02678EPSS
SaveExploits2References1
Rows per page
Query Builder