Lucene search
K

7 matches found

Openbugbounty
Openbugbounty
added 2017/07/02 1:36 p.m.9 views

brittonproducts.com XSS vulnerability

Vulnerable URL: http://www.brittonproducts.com/cart/searchresult.asp?DESCRIPTION===1"...

6.9AI score
Exploits0
Cvelist
Cvelist
added 2010/03/09 8:0 p.m.12 views

CVE-2010-0954

SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...

8.4AI score0.00765EPSS
Exploits1References6
CVE
CVE
added 2010/03/09 8:0 p.m.34 views

CVE-2010-0954

CVE-2010-0954 corresponds to a SQL injection vulnerability in the Pre Projects Pre E-Learning Portal, specifically in search_result.asp where the course_ID parameter can be exploited to execute arbitrary SQL commands. The connected documents confirm the vulnerability details and affected componen...

7.5CVSS8.7AI score0.00765EPSS
Exploits1References6Affected Software1
Packet Storm
Packet Storm
added 2010/03/05 12:0 a.m.13 views

Pre E-Learning Portal SQL Injection

=============================================================================================== o Pre E-Learning Portal SQL Injection Vulnerability Software : Pre E-Learning Portal Vendor : http://www.preproject.com/ Demo : http://www.preprojects.com/elearning/ Author : NoGe Contact :...

0.3AI score
Exploits0
xssed
xssed
added 2009/09/18 12:0 a.m.14 views

Unfixed XSS vulnerability at www.gsfclimited.com

Security researcher Grand Chyren, has submitted on 18/09/2009 a cross-site-scripting XSS vulnerability affecting www.gsfclimited.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is...

6.6AI score
Exploits0References1
Prion
Prion
added 2006/05/10 2:14 a.m.11 views

Sql injection

SQL injection vulnerability in searchresult.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

6.4CVSS8.8AI score0.00897EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2006/05/09 11:0 p.m.43 views

CVE-2006-2296

The CVE-2006-2296 entry concerns an SQL injection in EDirectoryPro 2.0 and earlier, specifically affecting the search_result.asp component. The underlying issue is a vulnerability in handling the keyword parameter that allows remote attackers to execute arbitrary SQL commands. Affects: EDirectory...

6.4CVSS8.1AI score0.00897EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder