Lucene search
K

10 matches found

NVD
NVD
added 2025/11/10 11:15 p.m.2 views

CVE-2021-4462

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...

9.8CVSS0.20271EPSS
Exploits2References3
VulnCheck KEV
VulnCheck KEV
added 2025/11/10 12:0 a.m.2 views

VulnCheck KEV: CVE-2021-4462

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed because the application does not perform proper server-side...

9.8CVSS6AI score0.20271EPSS
In wildExploits2References80
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-2912

Malware in sbrugna...

7.5CVSS6.4AI score0.00233EPSS
Exploits0References2
CNVD
CNVD
added 2015/01/04 12:0 a.m.2 views

Telerik UI for ASP.NET AJAX Q3 Absolute Path Traversal Vulnerability

Telerik UI for ASP.NET AJAX Q3 is the development version of the famous ASP.NET commercial control. An absolute path traversal vulnerability in Telerik UI for ASP.NET AJAX Q3 prior to 2012 SP2 allows remote attackers to execute arbitrary code by writing an arbitrary file to the full pathname of t...

7.5CVSS7.9AI score0.0177EPSS
Exploits1References1
Prion
Prion
added 2014/12/25 9:59 p.m.30 views

Path traversal

Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value...

7.5CVSS7.8AI score0.0177EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2009/08/21 11:30 a.m.10 views

CVE-2009-2924

Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...

7.5CVSS8.6AI score0.00233EPSS
Exploits0References1
Prion
Prion
added 2009/08/21 11:30 a.m.10 views

Sql injection

Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...

7.5CVSS9.3AI score0.00233EPSS
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2009/08/18 12:0 a.m.28 views

Videos Broadcast Yourself V2 (UploadID) SQL Injection Vuln

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability videoint.php UploadID Videos Broadcast Yourself V2 http://www.videosbroadcastyourself.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2009/08/18 12:0 a.m.24 views

Videos Broadcast Yourself 2 SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability videoint.php UploadID Videos Broadcast Yourself V2 http://www.videosbroadcastyourself.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

0.8AI score
Exploits0
exploitpack
exploitpack
added 2009/08/18 12:0 a.m.18 views

Videos Broadcast Yourself 2 - UploadID SQL Injection

Videos Broadcast Yourself 2 - UploadID SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability videoint.php UploadID Videos Broadcast Yourself V2 http://www.videosbroadcastyourself.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

0.5AI score
Exploits0
Rows per page
Query Builder