Lucene search
+L

125 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/16 12:00 a.m.•7 views

CVE-2008-0286: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 password fields...

7.5CVSS6.4AI score0.01145EPSS
SaveExploits2References2
NVD
NVD
•added 2004/12/31 5:00 a.m.•27 views

CVE-2004-2138

Cross-site scripting XSS vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the 1 Name, 2 Email, 3 Homepage or 4 Comments field...

6.8CVSS6AI score0.01473EPSS
SaveExploits1References4
Exploit DB
Exploit DB
•added 2004/03/15 12:00 a.m.•38 views

PHP-Nuke 7.1 Recommend_Us Module - 'fname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9879/info It has been reported that PHP-Nuke may be prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data via the 'Your Name', 'nicname', 'fname', 'ratenum', and 'search'...

4.3CVSS5.8AI score0.01736EPSS
SaveExploits2
NVD
NVD
•added 2004/02/17 5:00 a.m.•22 views

CVE-2003-1031

Cross-site scripting XSS vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as 1 "Interests-Hobbies", 2 "Biography", or 3 "Occupation."...

4.3CVSS5.8AI score0.01394EPSS
SaveExploits2References1
NVD
NVD
•added 2002/08/12 4:00 a.m.•21 views

CVE-2002-0730

Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as 1 Name, 2 EMail, or 3 Homepage...

7.5CVSS6.5AI score0.0686EPSS
SaveExploits2References3
Rows per page
Query Builder