16621 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2013-0416
Software Genérico Database
N/A
UNKNOWN
EPSS
0.2%
2013 2 PoCs

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-2403.

CVE-2008-2909
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter.

CVE-2008-4352
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php.

CVE-2008-0714
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

CVE-2008-6365
Software Genérico Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, related to the uname or pass parameters to logon.jsp or logon_processing.jsp. NOTE: some of these details are obtained from third party information.

CVE-2007-3809
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.7%
2007 1 PoC

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action to directory.php, and other unspecified vectors.

CVE-2014-0457
Software Genérico Database
N/A
UNKNOWN
EPSS
17.5%
2014 2 PoCs

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVE-2013-3805
Software Genérico Database
N/A
UNKNOWN
EPSS
0.6%
2013 3 PoCs

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements.

CVE-2008-2263
Software Genérico Web Database Windows
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. NOTE: linking.page.php is commonly renamed to link.php, links.php, etc.

CVE-2008-1408
Software Genérico Web Database
N/A
UNKNOWN
EPSS
1.1%
2008 1 PoC

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action.

CVE-2008-5875
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 2 PoCs

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.

CVE-2008-0561
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.0%
2008 1 PoC

SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.

CVE-2013-0359
Software Genérico Database
N/A
UNKNOWN
EPSS
0.9%
2013 2 PoCs

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management.

CVE-2008-3752
Software Genérico Web Database Windows
N/A
UNKNOWN
EPSS
0.3%
2008 1 PoC

SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-6809
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter.

CVE-2008-1934
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-2537
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVE-2014-2458
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2014 1 PoC

Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install.

CVE-2013-2466
Software Genérico Database
N/A
UNKNOWN
EPSS
7.5%
2013 3 PoCs

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.

CVE-2008-0811
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php.