17 matches found
EUVD-2007-3546
Malware in sbrugna...
EUVD-2023-58655
Malicious code in bioql PyPI...
CVE-2023-6418
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...
beta.veoh.com XSS vulnerability
Vulnerable URL: http://beta.veoh.com/m/videos.php?category=categoryeducationalandhowto==='"/alert"openbugbounty"...
store.avn.com XSS vulnerability
Vulnerable URL: http://store.avn.com/search-videos.php?q=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check store.avn.com SSL...
PHP Melody CMS 2.3 SQL Injection
================================================================================ PHP Melody CMS v2.3 SQL injection ================================================================================ Vendor Homepage: https://www.phpsugar.com Date: 26/12/2015 Script Link:...
CVE-2012-6644
Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...
CVE-2012-6643
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
Clipbucket 2.6 - videos.php?time SQL Injection
Clipbucket 2.6 - videos.php?time SQL Injection source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Web Design Noida SQL Injection
============================================== Web Design Noida SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Web Design Noida SQL Injection Vulnerability Vendor:...
PHPDirector 0.30 - videos.php SQL Injection
PHPDirector 0.30 - videos.php SQL Injection ====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails :...
Sql injection
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3562
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3562
CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...
CVE-2007-3529
CVE-2007-3529 affects videos.php in PHPDirector 0.21 and earlier. The vulnerability allows remote attackers to obtain sensitive information by sending an empty value for the id[] parameter, which triggers an error message that reveals the path. Affected software is PHPDirector (videos.php) with v...
CVE-2007-3529
videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id parameter, which reveals the path in an error message...