Lucene search
+L

421 matches found

Exploit DB
Exploit DB
•added 2009/09/09 12:00 a.m.•52 views

Model Agency Manager Pro - 'user_id' SQL Injection

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:view.php userid Remote SQL Injection Vulnerability ☠Vendor: www.phpmodelagencyscript.com ☠â˜...

7.5CVSS5.8AI score0.00923EPSS
SaveExploits1
Prion
Prion
•added 2009/08/19 5:24 a.m.•25 views

Sql injection

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary SQL commands via the 1 userid and 2 password parameter...

7.5CVSS9.4AI score0.00967EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/18 12:00 a.m.•8 views

CVE-2008-7003: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary SQL commands via the 1 userid and 2 password parameter...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2009/06/01 12:00 a.m.•39 views

JVideo! Component for Joomla! 'user_id' Parameter SQLi

The version of the JVideo! component for Joomla! running on the remote host is affected by a SQL injection vulnerability in the models/user.php script due to improper sanitization of user-supplied input to the 'userid' parameter before using it to construct database queries in the getUsername...

7.5CVSS5.9AI score0.01063EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2009/05/30 12:00 a.m.•35 views

Joomla JVideo 0.3.x SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz : d4n!ux + xjeshua + eCORE + Painboy + rayok3nt ...

1.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/05/29 12:00 a.m.•36 views

Joomla! Component JVideo 0.3.x - SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz : d4n!ux + xjeshua + eCORE + Painboy + rayok3nt ...

5.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/29 12:00 a.m.•28 views

Joomla! Component JVideo 0.3.x - SQL Injection

Joomla! Component JVideo 0.3.x - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz :...

1.6AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/27 12:00 a.m.•41 views

Mole Adult Portal Script (profile.php user_id) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/26 12:00 a.m.•25 views

Mole Adult Portal Script - profile.php?user_id SQL Injection

Mole Adult Portal Script - profile.php?userid SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO:...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/05/26 12:00 a.m.•44 views

Mole Adult Portal Script - 'profile.php?user_id' SQL Injection

|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

7.5CVSS5.8AI score0.01011EPSS
SaveExploits2
exploitpack
exploitpack
•added 2009/05/22 12:00 a.m.•45 views

ZaoCMS - user_id SQL Injection

ZaoCMS - userid SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: ZaoCMS - SQL Injection Vulnerability =INFO: http://zaocms.com/ =BUY: http://zaocms.com/ =DORK: --...

0.2AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/05 12:00 a.m.•22 views

PHP Site Lock 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. -------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit:...

7.1AI score
SaveExploits0
NVD
NVD
•added 2009/01/09 6:30 p.m.•26 views

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

4.3CVSS5.7AI score0.01484EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/09 12:00 a.m.•3 views

CVE-2009-0106: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS6.4AI score0.01024EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/09 12:00 a.m.•4 views

CVE-2009-0107: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

4.3CVSS5.9AI score0.01484EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/10/09 12:00 a.m.•31 views

Joomla Community Exchange SQL Injection

Joomla Component Community Exchange userid SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" ModuleName: "Community Exchange" Version: "1.0.0" Author: "Mubashir Ahmad Waqar" Author E-mail:...

0.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/09/24 12:00 a.m.•30 views

Oceandir 'show_vote.php' SQL注入漏洞

BUGTRAQ ID: 31277 CNCAN ID:CNCAN-2008092312 Oceandir是一款基于PHP的WEB应用程序。 Oceandir不正确处理用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可能获得敏感信息或操作数据库。 问题由于'showvote.php'脚本对用户提交给'id'参数缺少过滤,构建恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 Oceandir 2.9 目前没有解决方案提供: http://www.oceandir.com/...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/05 12:00 a.m.•4 views

CVE-2008-3937: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Open Media Collectors Database OpenDb 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in an edit action to useradmin.php, the 2 title parameter to listings.php, and the 3 redirecturl parameter to...

4.3CVSS5.8AI score0.01358EPSS
SaveExploits4References3
Prion
Prion
•added 2008/09/02 3:41 p.m.•25 views

Sql injection

Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and 2 remote authenticated administrators to execute arbitrary SQL commands via the userid parameter in a viewus...

6CVSS8.8AI score0.00931EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/02 12:00 a.m.•5 views

CVE-2008-3887: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and 2 remote authenticated administrators to execute arbitrary SQL commands via the userid parameter in a viewus...

6CVSS6.4AI score0.00931EPSS
SaveExploits1References2
Rows per page
Query Builder