the:paradox vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote malicious users to execute arbitrary SQL commands via the search parameter.

Revokesoft Revokebb 1.0

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and previous versions allow remote malicious users to execute arbitrary SQL commands via the searchtext parameter to search.php, and unspecified other vectors.

Myphp Forum Myphp Forum

1 EDB exploit

7.5

CVSSv3

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote malicious users to obtain access to any account via a lostpass action.

Webportal Cms Project Webportal Cms 0.6.0

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote malicious users to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors.

Webportal Webportal Cms 0.6 Beta

1 EDB exploit

NA

The pnVarPrepForStore function in PostNuke 0.764 and previous versions skips input sanitization when magic_quotes_runtime is enabled, which allows remote malicious users to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables...

Postnuke Postnuke

1 EDB exploit

NA

SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) prior to 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.

1 EDB exploit

NA

SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and previous versions allows remote malicious users to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP ...

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum Simple Machines Simple Machines Forum 1.1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.0.12 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.2

1 EDB exploit

NA

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote malicious users to execute arbitrary SQL commands via the cuid cookie parameter to admin.php.

Limbo Cms Limbo Cms

1 EDB exploit

NA

Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and previous versions, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in th...

Exbb Exbb Italia

1 EDB exploit

NA

ExBB Italia 0.22 and previous versions only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote malicious users to bypass this check via (1) POST or (2) COOKIE variables, a different vector than CVE-2006-4488. NOTE: this can be levera...

Exbb Exbb Italia

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook