Lucene search
+L

24 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/28 12:00 a.m.•3 views

CVE-2018-17380: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

9.8CVSS8.2AI score0.0328EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2009/02/13 6:00 p.m.•48 views

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

7.6AI score0.26143EPSS
SaveExploits6References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/13 12:00 a.m.•5 views

CVE-2008-6132: Improper Control of Generation of Code

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

6.8CVSS6.4AI score0.26143EPSS
SaveExploits6References2
Metasploit
Metasploit
•added 2008/10/01 12:00 a.m.•58 views

phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection

This module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magicquotesgpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected. Module Options...

6.8CVSS6.2AI score0.26143EPSS
SaveExploits6
Rows per page
Query Builder