Lucene search
+L

432 matches found

Cvelist
Cvelist
added 2009/07/01 12:26 p.m.31 views

CVE-2009-2276

SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter...

8.4AI score0.00923EPSS
SaveExploits1References1
Drupal
Drupal
added 2009/03/25 12:00 a.m.16 views

SA-CONTRIB-2009-017 - Vote Up/Down - Cross-site request forgery

The Vote Up/Down module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Vote Up/Down 5.x-1.x prior to 5.x-1.1 Vote Up/Down...

7AI score
SaveExploits0References7
seebug.org
seebug.org
added 2008/11/10 12:00 a.m.32 views

AJSquare Free Polling Script (DB) Multiple Vulnerabilities

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/10/24 12:00 a.m.20 views

The remote host is infected by a virus

This script checks for the presence of different virii on the remote host, by using the SMB credentials you provide the scanner with. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

7.4AI score
SaveExploits0
NVD
NVD
added 2008/10/21 1:18 a.m.22 views

CVE-2008-4633

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

6CVSS7.9AI score0.00849EPSS
SaveExploits0References4
Prion
Prion
added 2008/10/21 1:18 a.m.19 views

Sql injection

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

6CVSS8.5AI score0.00849EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2008/10/21 1:18 a.m.9 views

CVE-2008-4633

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

6CVSS6.4AI score0.00849EPSS
SaveExploits0References5
CVE
CVE
added 2008/10/21 12:00 a.m.52 views

CVE-2008-4633

CVE-2008-4633 affects the Drupal Node Vote module (5.x before 5.x-1.1 and 6.x before 6.x-1.0). The issue is a SQL injection in the module when “Allow user to vote again” is enabled, allowing remote authenticated users to execute arbitrary SQL via vectors related to a “previously cast vote.” Explo...

6CVSS7.9AI score0.00849EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2008/10/21 12:00 a.m.29 views

CVE-2008-4633

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

7.9AI score0.00849EPSS
SaveExploits0References4
Drupal
Drupal
added 2008/10/15 12:00 a.m.22 views

SA-2008-064 - Node Vote - SQL injection vulnerability

The Node Vote module allows authorized users to vote on certain types of nodes. If the administrator has enabled the "Allow user to vote again" setting for the Node Vote module, malicious user can inject SQL when changing a previously cast vote. This is because Node Vote does not properly use the...

8.3AI score
SaveExploits0References6
Prion
Prion
added 2008/02/22 11:44 p.m.22 views

Cross site scripting

Cross-site scripting XSS vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi aka Quotes of the Day 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier,...

4.3CVSS5.9AI score0.01033EPSS
SaveExploits0References4Affected Software10
NVD
NVD
added 2008/02/22 11:44 p.m.31 views

CVE-2008-0917

Cross-site scripting XSS vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi aka Quotes of the Day 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier,...

4.3CVSS5.6AI score0.01033EPSS
SaveExploits0References4
CVE
CVE
added 2008/02/22 11:00 p.m.56 views

CVE-2008-0917

In the connected documents, CVE-2008-0917 is described as a cross-site scripting (XSS) vulnerability in multiple Tor World CGI scripts, including Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1, Diary.cgi 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Int...

4.3CVSS5.6AI score0.01033EPSS
SaveExploits0References4Affected Software10
Cvelist
Cvelist
added 2008/02/22 11:00 p.m.41 views

CVE-2008-0917

Cross-site scripting XSS vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 and earlier, Diary.cgi aka Quotes of the Day 1.5 and earlier, Tor News 1.21 and earlier, Simple BBS 1.3 and earlier, Interactive BBS 1.3 and earlier, Tor Board 1.1 and earlier,...

5.6AI score0.01033EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/02/21 12:00 a.m.26 views

JVN#54593414 Cross-site scripting vulnerability in multiple Tor World CGI scripts

Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest update...

6.7AI score
SaveExploits0
xssed
xssed
added 2007/09/30 12:00 a.m.16 views

Unfixed Redirect vulnerability at www.karangturi.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.karangturi.org, which at the time of submission ranked 2527778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixe...

SaveExploits0References1
xssed
xssed
added 2007/09/28 12:00 a.m.14 views

Unfixed Redirect vulnerability at www.pkkgercegi.net

Security researcher st@rext, has submitted on 28/09/2007 a Redirect vulnerability affecting www.pkkgercegi.net, which at the time of submission ranked 561691 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. I...

SaveExploits0References1
NVD
NVD
added 2007/08/17 9:17 p.m.23 views

CVE-2007-4384

Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary PHP code via a URL in the 1 NomVote and 2 FilePalHex parameters...

6.8CVSS7.7AI score0.02094EPSS
SaveExploits1References3
CVE
CVE
added 2007/08/17 9:12 p.m.52 views

CVE-2007-4384

CVE-2007-4384 refers to multiple PHP remote file inclusion vulnerabilities in depouilg.php3 of Stephane Pineau VOTE 1c. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the NomVote or FilePalHex parameters. This is documented across multiple sources (NVD/NVD-...

6.8CVSS7.7AI score0.02094EPSS
SaveExploits1References3Affected Software1
Packet Storm
Packet Storm
added 2007/08/16 12:00 a.m.22 views

systemedevote-rfi.txt

//////////////////////////////////////////// Système de vote en temps réel v1.0 Remote File İnclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...

7.4AI score
SaveExploits0
Rows per page
Query Builder