Lucene search
+L

4773 matches found

CVE
CVE
added 2007/04/27 4:00 p.m.51 views

CVE-2007-2334

The CVE-2007-2334 issue affects Nortel VPN Router (Contivity) 1000/2000/4000/5000 prior to specific firmware revisions: 5_05.149, 5_05.304 for 5_05.x line, and 6.x prior to 6_05.140. The vulnerability arises from two template HTML files that lack certain verification tags, enabling remote attacke...

7.5CVSS6.6AI score0.01609EPSS
SaveExploits0References6Affected Software2
zdt
zdt
added 2007/04/11 12:00 a.m.35 views

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...

7.1AI score
SaveExploits0
NVD
NVD
added 2007/04/02 11:19 p.m.29 views

CVE-2007-1818

PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.5CVSS7.6AI score0.02797EPSS
SaveExploits1References5
Prion
Prion
added 2007/04/02 11:19 p.m.27 views

Remote file inclusion

PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.5CVSS8.1AI score0.02797EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2007/04/02 11:00 p.m.62 views

CVE-2007-1818

CVE-2007-1818 is a PHP remote file inclusion vulnerability in the MOD_forum_fields_parse.php file of the Forum picture and META tags 1.7 module for phpBB. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter, enabling remote code execution ...

7.5CVSS7.6AI score0.02797EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2007/04/02 11:00 p.m.42 views

CVE-2007-1818

PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

7.6AI score0.02797EPSS
SaveExploits1References5
securityvulns
securityvulns
added 2007/04/02 12:00 a.m.181 views

phpBB Module Forum picture and META tags 1.7 File Include Vulnerability

Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability Vendor: http://www.rfnnet.nl/downloads/phpbb/MODForumpictureandMETAtags.zip Founder: bd0rk Contact: bd0rkathackermail.com Greetings: str0ke, TheJT, Lu7k, CodeR Vulnerable in MODforumfieldsparse.php:...

0.3AI score
SaveExploits0
zdt
zdt
added 2007/03/30 12:00 a.m.31 views

phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability =========================================================== Exploitname: phpBB Module Forum picture and META tags 1.7...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/03/30 12:00 a.m.38 views

phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion

Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability Vendor: http://www.rfnnet.nl/downloads/phpbb/MODForumpictureandMETAtags.zip Founder: bd0rk Contact: bd0rkathackermail.com Greetings: str0ke, TheJT, Lu7k, CodeR Vulnerable in MODforumfieldsparse.php:...

7.5CVSS5.8AI score0.02797EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2007/03/28 10:19 p.m.57 views

CVE-2007-1736

Mozilla Firefox 2.0.0.3 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...

7.5CVSS5.8AI score0.01158EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2007/03/14 6:19 p.m.30 views

CVE-2007-1454

ext/filter in PHP 5.2.0, when FILTERSANITIZESTRING is used with the FILTERFLAGSTRIPLOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting XSS attacks via HTML with a '' character followed by certain whitespace characters, which passes one filter...

4.3CVSS5.8AI score0.01304EPSS
SaveExploits0References1
Prion
Prion
added 2007/03/14 6:19 p.m.25 views

Cross site scripting

ext/filter in PHP 5.2.0, when FILTERSANITIZESTRING is used with the FILTERFLAGSTRIPLOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting XSS attacks via HTML with a '' character followed by certain whitespace characters, which passes one filter...

4.3CVSS5.7AI score0.01304EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2007/02/24 1:28 a.m.19 views

CVE-2006-7059

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...

4.3CVSS5.8AI score0.01107EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2007/02/24 1:00 a.m.33 views

CVE-2006-7059

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities &0000039 in IMG tags to 1 messages, 2 profile fields, or 3 the id parameter in a dologin operation to cindex.php...

5.8AI score0.01107EPSS
SaveExploits1References5
NVD
NVD
added 2007/02/23 3:28 a.m.21 views

CVE-2006-7033

Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...

6.8CVSS5.7AI score0.01134EPSS
SaveExploits0References3
CVE
CVE
added 2007/02/23 1:00 a.m.54 views

CVE-2006-7033

The CVE-2006-7033 entry describes a Cross-site Scripting (XSS) vulnerability in Super Link Exchange Script 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through IMG tags in the search box. This affects the vulnerable component (the search input handling in Super Lin...

6.8CVSS5.9AI score0.01134EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/02/23 1:00 a.m.30 views

CVE-2006-7033

Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...

5.7AI score0.01134EPSS
SaveExploits0References3
CVE
CVE
added 2007/02/23 1:00 a.m.57 views

CVE-2006-7030

The CVE-2006-7030 entry concerns Microsoft Internet Explorer 6 SP2 and earlier. It describes a vulnerability where remote attackers can cause a denial of service (crash) by delivering certain malformed HTML, potentially involving applet and base tags without required arguments, which triggers a n...

5CVSS7AI score0.16464EPSS
SaveExploits0References5Affected Software1
exploitpack
exploitpack
added 2007/02/20 12:00 a.m.18 views

Microsoft Internet Explorer 6 - Local File Access

Microsoft Internet Explorer 6 - Local File Access source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker...

SaveExploits0
Exploit DB
Exploit DB
added 2007/02/20 12:00 a.m.32 views

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

4.3CVSS5.8AI score0.10893EPSS
SaveExploits2
Rows per page
Query Builder