Lucene search
+L

1061 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/10 12:00 a.m.•7 views

CVE-2009-3846: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter...

10CVSS6.7AI score0.1387EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/10 12:00 a.m.•5 views

CVE-2009-4176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter to ovlogin.exe...

10CVSS6.7AI score0.11794EPSS
SaveExploits1References2
Prion
Prion
•added 2009/10/16 4:30 p.m.•29 views

Sql injection

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

7.5CVSS8.9AI score0.01256EPSS
SaveExploits7References7Affected Software1
NVD
NVD
•added 2009/10/16 4:30 p.m.•36 views

CVE-2009-2734

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

7.5CVSS8.2AI score0.01256EPSS
SaveExploits7References7
Mend
Mend
•added 2009/10/16 4:00 p.m.•3 views

CVE-2009-2734

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

7.5CVSS0.01256EPSS
SaveExploits7References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/16 12:00 a.m.•6 views

CVE-2009-2734: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the getemployee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter aka userid variable to dispatch.php...

7.5CVSS6.5AI score0.01256EPSS
SaveExploits7References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/25 12:00 a.m.•5 views

CVE-2009-3417: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the IDoBlog comidoblog component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627...

7.5CVSS6.4AI score0.01793EPSS
SaveExploits1References2
myhack58
myhack58
•added 2009/08/29 12:00 a.m.•34 views

Small black are the commonly used background universal login password or-the vulnerability warning-the black bar safety net

After landing in the background, receiving a user input of Userid and Password data, respectively, and assigned to the user and pwd, and then use the sql="select from admin where username="&user&" and password="&pwd&"" This sentence to the user name and password to be verified. To common sense to...

0.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/27 12:00 a.m.•8 views

CVE-2009-2604: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/10 12:00 a.m.•6 views

CVE-2009-2428: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to suchauftraegeuser.php and the 2 descr parameter to vote.php; and other unspecified vectors...

7.5CVSS6.4AI score0.00969EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2009/07/08 12:00 a.m.•14 views

SMTP UserID Detection

Binary data 7015.pasl...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/07/08 12:00 a.m.•8 views

Yahoo UserID Detection (deprecated)

Binary data 7018.pasl...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/07/08 12:00 a.m.•15 views

AIM UserID Detection (deprecated)

Binary data 7017.pasl...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2009/07/08 12:00 a.m.•14 views

Gmail UserID Detection (deprecated)

Binary data 7016.pasl...

7.3AI score
SaveExploits0
Prion
Prion
•added 2009/07/02 10:30 a.m.•21 views

Sql injection

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board WBB3 allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627...

7.5CVSS8.8AI score0.01042EPSS
SaveExploits3References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/02 12:00 a.m.•6 views

CVE-2009-2311: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board WBB3 allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2009/06/11 12:00 a.m.•125 views

Sniggabo CMS (article.php id) Remote SQL Injection Exploit

No description provided by source. ?php printr' Sniggabo CMS - Remote SQL Injection Exploit Date: 11.06.2009 Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Homepage: http://www.novusec.com Greetz to: -=Player=- , Suicide, enco, Palme, GPM, karamble, Free-Hack Admin Panel...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/06/11 12:00 a.m.•36 views

Sniggabo CMS - article.php?id SQL Injection

Sniggabo CMS - article.php?id SQL Injection milw0rm.com 2009-06-11...

0.3AI score
SaveExploits0
NVD
NVD
•added 2009/06/01 7:30 p.m.•27 views

CVE-2009-1854

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1...

7.5CVSS7.2AI score0.02426EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2009/06/01 7:00 p.m.•39 views

CVE-2009-1854

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1...

7.2AI score0.02426EPSS
SaveExploits1References1
Rows per page
Query Builder