Lucene search
+L

59 matches found

CVE
CVE
added 2023/11/30 1:12 p.m.55 views

CVE-2023-6414

Voovi Social Networking Script 1.0 is affected by a SQL injection via perfil.php in the id and user parameters. The root cause is a lack of input validation/parameterization in those fields, enabling an attacker to craft SQL queries to access information stored by the application. The connected s...

9.8CVSS7.9AI score0.00831EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 1:11 p.m.29 views

CVE-2023-6413 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photos.php in the id and user parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and...

9.8CVSS9.7AI score0.00831EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 1:11 p.m.50 views

CVE-2023-6412

Voovi Social Networking Script (version 1.0) contains a SQL injection in the photo.php file via multiple parameters, enabling a remote attacker to submit crafted SQL and potentially retrieve all stored data. The vulnerability is reported across multiple databases and advisories; exploitation stat...

9.8CVSS7.9AI score0.00831EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 1:11 p.m.39 views

CVE-2023-6412 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via photo.php in multiple parameters. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

9.8CVSS9.7AI score0.00831EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 1:10 p.m.46 views

CVE-2023-6411

Voovi Social Networking Script 1.0 contains a SQL injection in home.php (update parameter). Exploitation could allow a remote attacker to send a crafted SQL query and retrieve all data stored by the application. The vulnerability is reported across multiple feeds (NVD/NVD-derived and related reco...

9.8CVSS8.2AI score0.00831EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 1:10 p.m.30 views

CVE-2023-6411 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via home.php in the update parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

9.8CVSS9.7AI score0.00831EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.12 views

PT-2023-32647 · Unknown · Voovi Social Networking Script

Name of the Vulnerable Software and Affected Versions: Voovi Social Networking Script version 1.0 Description: A SQL injection vulnerability has been reported, affecting the signup2.php file through the emailadd parameter. This could allow a remote attacker to send a specially crafted SQL query t...

9.8CVSS7.7AI score0.00831EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.12 views

PT-2023-32641 · Unknown · Voovi Social Networking Script

Name of the Vulnerable Software and Affected Versions: Voovi Social Networking Script version 1.0 Description: A SQL injection vulnerability has been reported, affecting the editprofile.php endpoint in multiple parameters, such as username and password. This could allow a remote attacker to send ...

9.8CVSS7.7AI score0.00831EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2019/05/09 6:29 p.m.7 views

CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

9.8CVSS6.1AI score0.0361EPSS
SaveExploits1References4
Prion
Prion
added 2019/05/09 6:29 p.m.23 views

Sql injection

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

7.5CVSS9.8AI score0.0361EPSS
SaveExploits1References3Affected Software12
Cvelist
Cvelist
added 2019/05/09 5:26 p.m.29 views

CVE-2017-12757

Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...

9.9AI score0.0361EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2018/11/05 12:00 a.m.158 views

Voovi Social Networking Script 1.0 SQL Injection

Exploit Title: Voovi Social Networking Script 1.0 - 'user' SQL Injection Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.adminspoint.com/voovi/index.php Software Link: https://netix.dl.sourceforge.net/project/voovi/voovi%20a%20social%20networking%20script.zip...

0.6AI score
SaveExploits0
securityvulns
securityvulns
added 2012/04/23 12:00 a.m.57 views

Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...

1AI score
SaveExploits0
Prion
Prion
added 2007/11/20 8:46 p.m.23 views

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

6.8CVSS8AI score0.05785EPSS
SaveExploits1References7
NVD
NVD
added 2007/11/20 8:46 p.m.25 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

6.8CVSS7.5AI score0.05785EPSS
SaveExploits1References7
CVE
CVE
added 2007/11/20 8:00 p.m.70 views

CVE-2007-6057

CVE-2007-6057 affects the datecomm Social Networking Script (also known as the Myspace Clone Script). The vulnerability is a PHP remote file inclusion in the script’s index.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pg parameter. This is confirmed across mul...

6.8CVSS7.5AI score0.05785EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2007/11/20 8:00 p.m.44 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

7.5AI score0.05785EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2007/11/15 10:00 p.m.34 views

CVE-2007-5992

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

8.3AI score0.01133EPSS
SaveExploits2References4
CVE
CVE
added 2007/11/15 10:00 p.m.53 views

CVE-2007-5992

The CVE-2007-5992 case concerns SQL injection in the datecomm Social Networking Script (aka Myspace Clone Script). Affected code path is index.php via the seid parameter in a viewcat action on the forums page, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is descr...

7.5CVSS8.3AI score0.01133EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder