16621 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2009-1766
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2009 1 PoC

SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2009-4712
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2009 1 PoC

SQL injection vulnerability in index.php in Tukanas Classifieds (aka EasyClassifieds) Script 1.0 allows remote attackers to execute arbitrary SQL commands via the b parameter.

CVE-2013-3818
Software Genérico Database
N/A
UNKNOWN
EPSS
0.4%
2013 1 PoC

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-2404.

CVE-2009-4784
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2009 1 PoC

SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php.

CVE-2009-0703
Software Genérico Database
N/A
UNKNOWN
EPSS
0.4%
2009 1 PoC

SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2009-2157
Software Genérico Web Database
N/A
UNKNOWN
EPSS
1.2%
2009 2 PoCs

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg parameter to account-inbox.php; the categ parameter to (2) delreq.php and (3) admin-delreq.php; (4) the choice parameter to index.php; (5) the id parameter to modrules.php in an edited (aka edit) action; the (6) user, (7) torrent, (8) forumid, and (9) forumpost parameters to report.php; (10) the delmp parameter to take-deletepm.php; (11) the delreport parameter to takedelreport.php; (12) the delreq parameter to takedelreq.php; (13) the clas

CVE-2009-2423
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.2%
2009 1 PoC

SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action.

CVE-2014-6559
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.8%
2014 4 PoCs

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

CVE-2013-3824
Software Genérico Database
N/A
UNKNOWN
EPSS
0.4%
2013 1 PoC

Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts.

CVE-2009-3762
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2009 1 PoC

Unspecified vulnerability in Oracle OpenSSO Enterprise 8.0 allows remote attackers to affect integrity via unknown vectors.

CVE-2009-0881
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2009 1 PoC

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2009-1804
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.3%
2009 1 PoC

Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVE-2009-1787
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.2%
2009 1 PoC

Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters.

CVE-2013-1569
Software Genérico Database
N/A
UNKNOWN
EPSS
1.5%
2013 6 PoCs

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.

CVE-2009-0292
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2009 1 PoC

SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter.

CVE-2009-4360
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.3%
2009 2 PoCs

SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVE-2009-1247
Software Genérico Web Database
N/A
UNKNOWN
EPSS
31.8%
2009 1 PoC

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVE-2009-0593
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2009 1 PoC

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action.

CVE-2007-0688
Software Genérico Database
N/A
UNKNOWN
EPSS
1.7%
2007 1 PoC

SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2014-0431
Software Genérico Database
N/A
UNKNOWN
EPSS
0.5%
2014 1 PoC

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881.