Lucene search
+L

421 matches found

NVD
NVD
•added 2011/11/02 9:55 p.m.•29 views

CVE-2010-5024

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

6CVSS8AI score0.00952EPSS
SaveExploits2References6
Prion
Prion
•added 2011/11/02 9:55 p.m.•25 views

Sql injection

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

6CVSS8.6AI score0.00952EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2011/11/02 9:00 p.m.•46 views

CVE-2010-5024

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

8AI score0.00952EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/02 12:00 a.m.•5 views

CVE-2010-5024: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

6CVSS6.5AI score0.00952EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2010/10/01 12:00 a.m.•28 views

iGaming CMS 1.5 - Blind SQL Injection

!/usr/bin/env perl =pod iGaming CMS Example: perl exploit.pl http://website.net/iGamingCMS1.5/ 1 Vulnerability: polls.class.php line 10-17 if !empty$REQUEST'id' $poll = $db-Execute" SELECT id,title FROM sppolls WHERE id = '" . $REQUEST'id' . "'"; $result = $db-Execute"SELECT FROM sppollsoptions...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/07/23 12:00 a.m.•44 views

Joomla Jomtube SQL Injection

=============================================================================== Joomla Component comjomtube userid Blind SQL Injection / SQL Injection =============================================================================== Author : SixP4ck3r Email & msn : [email protected] Date : 17...

7.4AI score
SaveExploits0
zdt
zdt
•added 2010/07/22 12:00 a.m.•44 views

Joomla Component com_jomtube Blind / SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================ Joomla Component comjomtube Blind / SQL Injection Vulnerability ================================================================ Author : SixP4ck3r Email & msn : email protected...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/07/22 12:00 a.m.•31 views

Joomla! Component com_jomtube - user_id Blind SQL Injection

Joomla! Component comjomtube - userid Blind SQL Injection =============================================================================== Joomla Component comjomtube userid Blind SQL Injection / SQL Injection =============================================================================== Author :...

8.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/07/22 12:00 a.m.•2 views

CVE-2009-4938: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JVideo! comjvideo component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a user action to index.php...

7.5CVSS6.4AI score0.01063EPSS
SaveExploits1References2
myhack58
myhack58
•added 2010/07/16 12:00 a.m.•30 views

ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/03/23 12:00 a.m.•26 views

Uiga Business Portal - 'index.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

5.8AI score
SaveExploits0
Prion
Prion
•added 2010/03/05 6:30 p.m.•24 views

Sql injection

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS9.1AI score0.01011EPSS
SaveExploits1References3
Prion
Prion
•added 2010/03/05 6:30 p.m.•21 views

Code injection

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

7.5CVSS7.5AI score0.0242EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2010/03/05 6:00 p.m.•36 views

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

6.9AI score0.0242EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/05 12:00 a.m.•4 views

CVE-2009-4673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS6.4AI score0.01011EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/05 12:00 a.m.•4 views

CVE-2009-4674: Undefined Security Weakness

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

7.5CVSS5.9AI score0.0242EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/02/27 12:00 a.m.•3 views

CVE-2010-0753: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SQL Reports comsqlreport component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter to ajax/print.php. NOTE: some of these details are obtained from third party information...

7.5CVSS6.5AI score0.01189EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2010/02/19 12:00 a.m.•42 views

PHPKit 1.6.1 - 'mailer.php' SQL Injection

Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS...

5.8AI score
SaveExploits0
zdt
zdt
•added 2010/02/19 12:00 a.m.•28 views

Phpkit 1.6.1 (member.php) Sql Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Phpkit 1.6.1 member.php Sql Injection Vulnerability ===================================================== Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | ...

7.1AI score
SaveExploits0
NVD
NVD
•added 2010/01/12 5:30 p.m.•44 views

CVE-2009-4597

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

7.5CVSS8.1AI score0.00987EPSS
SaveExploits3References4
Rows per page
Query Builder