Lucene search
+L

4589 matches found

Typo3
Typo3
•added 2008/10/20 12:00 a.m.•29 views

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: JobControl dmmjobcontrol, Econda Plugin econda, Frontend Users View feusersview, Mannschaftsliste kiddogplayerlist, M1 Intern m1intern, Simple survey simplesurvey, Page Improvements smpageimprovements Please re...

7.3AI score
SaveExploits0Affected Software7
NVD
NVD
•added 2008/09/11 9:06 p.m.•25 views

CVE-2008-4051

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01452EPSS
SaveExploits2References4
Prion
Prion
•added 2008/09/11 9:06 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01452EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2008/09/11 2:00 p.m.•37 views

CVE-2008-4051

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.01452EPSS
SaveExploits2References4
CVE
CVE
•added 2008/09/11 2:00 p.m.•56 views

CVE-2008-4051

CVE-2008-4051 describes a Cross-site scripting (XSS) vulnerability in Smart Survey 1.0, exposed via surveyresults.asp and the sid parameter. The vulnerability allows a remote attacker to inject arbitrary web script/HTML. Connected sources corroborate XSS in Smart Survey 1.0, but none provide publ...

4.3CVSS6AI score0.01452EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/11 12:00 a.m.•6 views

CVE-2008-4051: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01452EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/08/26 12:00 a.m.•27 views

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/08/26 12:00 a.m.•38 views

Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

4.3CVSS5.8AI score0.01452EPSS
SaveExploits2
exploitpack
exploitpack
•added 2008/08/06 12:00 a.m.•27 views

DD-WRT - Site Survey SSID Script Injection

DD-WRT - Site Survey SSID Script Injection source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit th...

7.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/08/06 12:00 a.m.•48 views

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

5.8AI score
SaveExploits0
Prion
Prion
•added 2008/07/25 4:41 p.m.•21 views

Sql injection

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS9.1AI score0.01019EPSS
SaveExploits2References4
NVD
NVD
•added 2008/07/25 4:41 p.m.•24 views

CVE-2008-3310

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.4AI score0.01019EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2008/07/25 4:00 p.m.•31 views

CVE-2008-3310

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.4AI score0.01019EPSS
SaveExploits2References4
CVE
CVE
•added 2008/07/25 4:00 p.m.•58 views

CVE-2008-3310

CVE-2008-3310 describes an SQL injection in default.asp of the Pre Survey Poll application, exploitable via the catid parameter to execute arbitrary SQL commands remotely. The vulnerability is borne by the web application’s input handling, enabling an attacker to influence the underlying database...

7.5CVSS8.4AI score0.01019EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/07/25 12:00 a.m.•7 views

CVE-2008-3310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS6.4AI score0.01019EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/07/23 12:00 a.m.•30 views

presurveypoll-sql.txt

PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql : http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/07/23 12:00 a.m.•57 views

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

No description provided by source. PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/07/22 12:00 a.m.•62 views

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Pre Survey Poll default.asp catid SQL Injection Vulnerability =============================================================== PRE SURVEY POLL Remote Sql Injection DreamTurk /...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/07/22 12:00 a.m.•25 views

Pre Survey Generator - default.asp SQL Injection

Pre Survey Generator - default.asp SQL Injection source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/07/22 12:00 a.m.•24 views

Pre Survey Poll - catid SQL Injection

Pre Survey Poll - catid SQL Injection PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

0.8AI score
SaveExploits0
Rows per page
Query Builder