25 matches found
EUVD-2007-3546
Malware in sbrugna...
EUVD-2023-58655
Malicious code in bioql PyPI...
CVE-2023-6418
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...
CVE-2023-6418: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...
beta.veoh.com XSS vulnerability
Vulnerable URL: http://beta.veoh.com/m/videos.php?category=categoryeducationalandhowto==='"/alert"openbugbounty"...
store.avn.com XSS vulnerability
Vulnerable URL: http://store.avn.com/search-videos.php?q=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check store.avn.com SSL...
PHP Melody CMS 2.3 SQL Injection
================================================================================ PHP Melody CMS v2.3 SQL injection ================================================================================ Vendor Homepage: https://www.phpsugar.com Date: 26/12/2015 Script Link:...
CVE-2012-6643
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
CVE-2012-6644
Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...
Sql injection
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
CVE-2012-6643: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...
PT-2014-2411
Name of the Vulnerable Software and Affected Versions ClipBucket version 2.6 Description The issue concerns SQL injection vulnerabilities in the update counter function, located in includes/functions.php. Remote attackers can exploit this by executing arbitrary SQL commands via the time parameter...
PT-2013-5471
Name of the Vulnerable Software and Affected Versions Vastal I-Tech phpVID version 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the n parameter to either "browse videos.php" or "members.php" API endpoints. Recommendations For version...
PT-2013-5472
Name of the Vulnerable Software and Affected Versions phpVID version 1.2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the n parameter to "browse videos.php" or the cat parameter to "groups.php". Recommendations For phpVID version...
Clipbucket 2.6 - videos.php?time SQL Injection
Clipbucket 2.6 - videos.php?time SQL Injection source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Web Design Noida SQL Injection
============================================== Web Design Noida SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Web Design Noida SQL Injection Vulnerability Vendor:...
PHPDirector 0.30 - videos.php SQL Injection
PHPDirector 0.30 - videos.php SQL Injection ====================================================================== PHPDirector 0.30 videos.php SQL Injection Vulnerability ====================================================================== Date : 29/06/2010 Author : Mr-AbdoX Emails :...
CVE-2010-2256: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...