Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bypass vulnerabilities and exploits
(subscribe to this query)
755
VMScore
CVE-2008-5631
SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote malicious users to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party informatio...
Activewebsoftwares Active Ewebquiz 8.0
1 EDB exploit
755
VMScore
CVE-2008-5633
SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote malicious users to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
Activewebsoftwares Activevotes 2.2
1 EDB exploit
755
VMScore
CVE-2008-5654
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote malicious users to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some ...
Myiosoft Easycalendar 4.0
1 EDB exploit
NA
CVE-2023-27100
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows malicious users to bypass brute force protection mechanisms via crafted web requests.
Netgate Pfsense Plus 22.05.1
Pfsense Pfsense 2.6.0
2 Github repositories
1000
VMScore
CVE-2009-1314
body.asp in Web File Explorer 3.1 allows remote malicious users to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.
Webfileexplorer Web File Explorer 3.1
1 EDB exploit
755
VMScore
CVE-2009-1323
SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Webfileexplorer Web File Explorer 3.1
1 EDB exploit
755
VMScore
CVE-2010-0698
SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote malicious users to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information.
Dynamicsoft Wsc Cms 2.2
1 EDB exploit
755
VMScore
CVE-2005-0841
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote malicious users to execute arbitrary SQL commands, as demonstrated via (1) the person par...
Phpmyfamily Phpmyfamily 1.4
1 EDB exploit
755
VMScore
CVE-2009-0810
SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote malicious users to execute arbitrary SQL commands via the user parameter.
Xatrix Xguestbook 2.0
1 EDB exploit
NA
CVE-2024-31621
An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote malicious user to execute arbitrary code via a crafted script to the api/v1 component.
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
7
8
9
10
NEXT »