Lucene search
+L

116 matches found

securityvulns
securityvulns
•added 2006/06/05 12:00 a.m.•32 views

xueBook 1.0 Version SQL Injection

xueBook 1.0 Version SQL Injection Credit : SpC-X Site : http://wWw.SaVSaK.CoM Greetz : | The-BeKiR | Liz0ziM | Poizonb0x | Erne | Code : http://www.target.com/path/index.php?start=SQL Example : http://www.secret-obsession.com/book/index.php?start=SQL /SpC-x -- Get your free email from...

0.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/18 12:00 a.m.•8 views

CVE-2006-1807: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...

7.5CVSS6.4AI score0.01377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/11 12:00 a.m.•8 views

CVE-2005-4159: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum SMF 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character...

7.5CVSS6.4AI score0.01377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2005/12/11 12:00 a.m.•18 views

PT-2005-4858 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.1 rc1 and earlier Description: A SQL injection issue in Memberlist.php allows remote attackers to potentially execute arbitrary SQL commands via the start parameter. However, the vendor and third parties...

7.5CVSS8.6AI score0.01377EPSS
SaveExploits0References9
NVD
NVD
•added 2005/12/01 6:03 a.m.•24 views

CVE-2005-3940

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...

7.5CVSS8.4AI score0.01353EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/01 12:00 a.m.•7 views

CVE-2005-3940: Undefined Security Weakness

SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter...

7.5CVSS6.4AI score0.01353EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•8 views

CVE-2005-3884: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term and 2 start parameters to index.php...

7.5CVSS6.4AI score0.0128EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/22 12:00 a.m.•8 views

CVE-2005-3746: Undefined Security Weakness

SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter...

7.5CVSS6.4AI score0.01162EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2005/11/06 12:00 a.m.•21 views

PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook

Name of the Vulnerable Software and Affected Versions: Chipmunk Scripts Guestbook affected versions not specified Description: The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that...

5CVSS6.3AI score0.01388EPSS
SaveExploits0References6
NVD
NVD
•added 2005/05/31 4:00 a.m.•30 views

CVE-2005-1778

Cross-site scripting XSS vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter...

2.6CVSS5.6AI score0.00964EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/31 12:00 a.m.•5 views

CVE-2005-1777: Undefined Security Weakness

SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter...

7.5CVSS6.4AI score0.01158EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/31 12:00 a.m.•8 views

CVE-2005-1778: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter...

2.6CVSS6AI score0.00964EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/16 12:00 a.m.•8 views

CVE-2005-1116: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendarscheduler.php...

4.3CVSS6AI score0.00963EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/26 12:00 a.m.•7 views

CVE-2005-0872: Undefined Security Weakness

Cross-site scripting XSS vulnerability in calendarscheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter...

4.3CVSS6AI score0.06402EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/20 12:00 a.m.•8 views

CVE-2005-0781: Undefined Security Weakness

SQL injection vulnerability in 1 viewall.php and 2 category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php...

7.5CVSS6.4AI score0.02411EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/20 12:00 a.m.•8 views

CVE-2005-0782: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 viewall.php and 2 category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php...

4.3CVSS5.9AI score0.03628EPSS
SaveExploits3References1
Rows per page
Query Builder