Lucene search
+L

307 matches found

exploitpack
exploitpack
added 2008/10/10 12:00 a.m.43 views

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection Joomla Component Ignite Gallery SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla"...

0.4AI score
SaveExploits0
zdt
zdt
added 2008/10/10 12:00 a.m.42 views

Joomla Component Ignite Gallery 0.8.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Joomla Component Ignite Gallery 0.8.3 SQL Injection Vulnerability ================================================================= Joomla Component Ignite Gallery SQL...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/10/10 12:00 a.m.27 views

Joomla Component Ignite Gallery 0.8.3 SQL Injection Vulnerability

No description provided by source. Joomla Component Ignite Gallery SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Ignite Galler...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/10 12:00 a.m.56 views

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

Joomla Component Ignite Gallery SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Ignite Gallery comignitegallery" Version: "0.8.3...

7.5CVSS5.8AI score0.02001EPSS
SaveExploits2
Prion
Prion
added 2007/11/15 10:46 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

4.3CVSS6.1AI score0.01196EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2007/11/15 10:46 p.m.17 views

CVE-2007-6003

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

4.3CVSS5.6AI score0.01196EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2007/11/15 10:00 p.m.31 views

CVE-2007-6003

Cross-site scripting XSS vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

5.6AI score0.01196EPSS
SaveExploits1References2
CVE
CVE
added 2007/11/15 10:00 p.m.50 views

CVE-2007-6003

CVE-2007-6003 affects the Thomson SpeedTouch 716 router with firmware 5.4.0.14, where a cross-site scripting (XSS) vulnerability exists in the CGI endpoint cgi/b/ic/connect. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the url parameter. The NVD entry li...

4.3CVSS5.6AI score0.01196EPSS
SaveExploits1References2Affected Software1
Exploit DB
Exploit DB
added 2007/11/10 12:00 a.m.30 views

Thomson SpeedTouch 716 - 'URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26808/info Thomson SpeedTouch 716 is prone to a cross-site scripting vulnerability because the device fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

4.3CVSS5.8AI score0.01196EPSS
SaveExploits1
exploitpack
exploitpack
added 2007/11/10 12:00 a.m.25 views

Thomson SpeedTouch 716 - URL Cross-Site Scripting

Thomson SpeedTouch 716 - URL Cross-Site Scripting source: https://www.securityfocus.com/bid/26808/info Thomson SpeedTouch 716 is prone to a cross-site scripting vulnerability because the device fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

6.8AI score
SaveExploits0
Prion
Prion
added 2007/10/12 1:17 a.m.19 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

4.3CVSS7.9AI score0.00609EPSS
SaveExploits0References5
Prion
Prion
added 2007/10/12 1:17 a.m.16 views

Authentication flaw

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

10CVSS7.4AI score0.03845EPSS
SaveExploits1References9Affected Software1
Prion
Prion
added 2007/10/12 1:17 a.m.25 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.0106EPSS
SaveExploits0References5
NVD
NVD
added 2007/10/12 1:17 a.m.27 views

CVE-2007-5383

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

10CVSS7AI score0.03845EPSS
SaveExploits1References9
NVD
NVD
added 2007/10/12 1:17 a.m.21 views

CVE-2007-5384

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

4.3CVSS7.4AI score0.00609EPSS
SaveExploits0References5
CVE
CVE
added 2007/10/12 1:00 a.m.49 views

CVE-2007-5385

Technical details about CVE-2007-5385 are not publicly provided in the supplied documents. Monitor for updates.

4.3CVSS5.8AI score0.0106EPSS
SaveExploits0References5Affected Software2
CVE
CVE
added 2007/10/12 1:00 a.m.55 views

CVE-2007-5383

The CVE-2007-5383 entry concerns Thomson/Alcatel SpeedTouch 7G routers (as used with BT Home Hub 6.2.6.B and earlier). The vulnerability allows remote attackers on an intranet to bypass authentication and gain administrative access by manipulating the PATH_INFO end character (notably a trailing s...

10CVSS7.1AI score0.03845EPSS
SaveExploits1References9Affected Software2
Cvelist
Cvelist
added 2007/10/12 1:00 a.m.34 views

CVE-2007-5384

Multiple cross-site request forgery CSRF vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistanc...

7.4AI score0.00609EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2007/10/12 1:00 a.m.35 views

CVE-2007-5383

The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative access via vectors including a '/' slash character at the end of the PATHINFO to cgi/b, aka "double-slash auth bypass....

7AI score0.03845EPSS
SaveExploits1References9
CVE
CVE
added 2007/10/12 1:00 a.m.58 views

CVE-2007-5384

CVE-2007-5384 involves CSRF flaws in the Thomson/Alcatel SpeedTouch 7G router (used by BT Home Hub 6.2.6.B and earlier). The vulnerabilities allow remote attackers to perform administrator actions via unspecified POST requests, demonstrated by enabling an inbound remote‑assistance HTTPS session o...

4.3CVSS7.4AI score0.00609EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder