Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
r3d-d3v!l vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-6379
SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote malicious users to execute arbitrary SQL commands via the ID parameter.
Mxmania Gallery Mx 2.0.0
1 EDB exploit
NA
CVE-2009-3343
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote malicious users to execute arbitrary SQL commands via the PropId parameter.
Hotwebscripts Hotweb Rentals
1 EDB exploit
NA
CVE-2010-2256
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php.
Payperviewvideosoftware Pay Per Minute Video Chat Script 2.0
Payperviewvideosoftware Pay Per Minute Video Chat Script 2.1
1 EDB exploit
NA
CVE-2008-5958
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote malicious users to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
Activewebsoftwares Active Test 2.1
1 EDB exploit
NA
CVE-2008-5973
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote malicious users to execute arbitrary SQL commands via the password parameter.
Activewebsoftwares Active Web Mail 4.0
1 EDB exploit
NA
CVE-2008-5975
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote malicious users to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Activewebsoftwares Active Price Comparison 4.0
1 EDB exploit
NA
CVE-2009-4436
Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote malicious users to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.
Activewebsoftwares Ewebquiz 8.0
1 EDB exploit
NA
CVE-2009-4574
SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote malicious users to execute arbitrary SQL commands via the country_id parameter.
I-escorts I-escorts Directory Script
1 EDB exploit
NA
CVE-2010-0158
SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote malicious users to execute arbitrary SQL commands via the id parameter in an article action to the com_content component, reachable through index.php. NOTE: the vendor disputes th...
Joomlabamboo Jb Simpla
1 EDB exploit
NA
CVE-2008-6873
SQL injection vulnerability in Active Web Mail 4.0 allows remote malicious users to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.
Activewebsoftwares Active Web Mail 4.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700
CVE-2022-48689
CVE-2024-27956
CVE-2023-6363
SQL
NULL pointer dereference
CVE-2023-41830
CVE-2015-2051
arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »