Lucene search
K

8 matches found

Cvelist
Cvelist
added 2010/07/22 10:0 a.m.14 views

CVE-2009-4937

Cross-site scripting XSS vulnerability in Small Pirate SPirate 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag...

5.7AI score0.0034EPSS
Exploits1References5
CVE
CVE
added 2010/07/22 10:0 a.m.48 views

CVE-2009-4937

CVE-2009-4937 describes an XSS in Small Pirate (SPirate) 2.1. An attacker can inject arbitrary script/HTML via an onmouseover in an img BBCode tag inside a url BBCode tag. The records consistently cite Cross-site scripting without details on exploit status or affected versions beyond 2.1. The con...

4.3CVSS5.8AI score0.0034EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2010/07/22 10:0 a.m.46 views

CVE-2009-4936

CVE-2009-4936 affects Small Pirate (SPirate) 2.1 with multiple SQL injection vulnerabilities. Remote attackers can inject through the id parameter in: (1) the default URI in an RSS .xml action, (2) pag1.php, (3) pag1-guest.php, (4) rss-comment_post.php (aka rss-coment_post.php), or (5) rss-pic-co...

7.5CVSS8.8AI score0.02104EPSS
Exploits1References9Affected Software1
Cvelist
Cvelist
added 2010/07/22 10:0 a.m.18 views

CVE-2009-4936

Multiple SQL injection vulnerabilities in Small Pirate SPirate 2.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to the default URI in an rss .xml action, or the id parameter to 2 pag1.php, 3 pag1-guest.php, 4 rss-commentpost.php aka rss-comentpost.php, or 5...

8.5AI score0.02104EPSS
Exploits1References9
NVD
NVD
added 2010/07/22 5:40 a.m.8 views

CVE-2009-4937

Cross-site scripting XSS vulnerability in Small Pirate SPirate 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag...

4.3CVSS5.7AI score0.0034EPSS
Exploits1References5
Prion
Prion
added 2010/07/22 5:40 a.m.14 views

Sql injection

Multiple SQL injection vulnerabilities in Small Pirate SPirate 2.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to the default URI in an rss .xml action, or the id parameter to 2 pag1.php, 3 pag1-guest.php, 4 rss-commentpost.php aka rss-comentpost.php, or 5...

7.5CVSS9.3AI score0.02104EPSS
Exploits1References9Affected Software1
exploitpack
exploitpack
added 2009/05/29 12:0 a.m.27 views

small pirate 2.1 - Cross-Site Scripting SQL Injection

small pirate 2.1 - Cross-Site Scripting SQL Injection || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

0.3AI score
Exploits0
Exploit DB
Exploit DB
added 2009/05/29 12:0 a.m.36 views

small pirate 2.1 - Cross-Site Scripting / SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

7.4AI score
Exploits0
Rows per page
Query Builder