Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ali vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-6572
SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote malicious users to execute arbitrary SQL commands via the keyword parameter.
Abledating Abledating 2.4
1 EDB exploit
NA
CVE-2014-3934
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote malicious users to execute arbitrary SQL commands via the topics[] parameter to modules.php.
Phpnuke Php-nuke 8.3
Phpnuke Submit News Module -
1 EDB exploit
NA
CVE-2009-2174
GUPnP 0.12.7 allows remote malicious users to cause a denial of service (crash) via an empty (1) subscription or (2) control message.
Gupnp Gupnp 0.12.7
1 EDB exploit
NA
CVE-2008-4599
SQL injection vulnerability in category.php in Mosaic Commerce allows remote malicious users to execute arbitrary SQL commands via the cid parameter.
Mosaic Commerce Mosaic Commerce
1 EDB exploit
NA
CVE-2012-4993
torrent_functions.php in RivetTracker 1.03 and previous versions does not properly restrict access, which allows remote malicious users to have an unspecified impact.
Rivetcode Rivettracker
1 EDB exploit
NA
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and previous versions allow remote malicious users to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.
Rivetcode Rivettracker 0.1
Rivetcode Rivettracker
Rivetcode Rivettracker 0.8
1 EDB exploit
NA
CVE-2015-6008
install.php in Web Reference Database (aka refbase) up to and including 0.9.6 allows remote malicious users to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
Refbase Refbase
1 EDB exploit
NA
CVE-2015-6009
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) up to and including 0.9.6 allow remote malicious users to execute arbitrary SQL commands via (1) the where parameter to rss.php or (2) the sqlQuery parameter to search.php, a different issue than CVE-2...
Refbase Refbase
1 EDB exploit
9.8
CVSSv3
CVE-2018-18399
SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote malicious user to execute arbitrary SQL commands via the "id" parameter.
Jco Karma 6.0.0
NA
CVE-2015-7382
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) up to and including 0.9.6 allows remote malicious users to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009.
Refbase Refbase
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »