16621 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2008-1934
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-2537
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter.

CVE-2014-2458
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2014 1 PoC

Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install.

CVE-2013-2466
Software Genérico Database
N/A
UNKNOWN
EPSS
7.5%
2013 3 PoCs

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.

CVE-2008-0811
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to (a) mod/dl.php or (b) mod/links.php, and (2) the query parameter to search.php.

CVE-2008-4354
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.

CVE-2008-4465
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

CVE-2008-0447
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter.

CVE-2013-5808
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2013 1 PoC

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration.

CVE-2008-6028
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action.

CVE-2008-0147
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter and possibly (2) username parameter in a Members action.

CVE-2008-4642
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 2 PoCs

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action.

CVE-2008-2874
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050.

CVE-2007-4581
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.6%
2007 1 PoC

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter.

CVE-2007-1339
Software Genérico Web Database
N/A
UNKNOWN
EPSS
3.4%
2007 1 PoC

SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrary SQL commands via the lcnt parameter.

CVE-2014-0452
Software Genérico Database
N/A
UNKNOWN
EPSS
4.5%
2014 2 PoCs

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

CVE-2008-5727
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.3%
2008 2 PoCs

SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the query string.

CVE-2008-6777
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a confirm action, the (2) user parameter in a newconfirm action, and (3) reqpwd action to member.php; and the (4) quote parameter in a post action and (5) pid parameter in an edit action to post.php, different vectors than CVE-2005-0413.2 and CVE-2007-6667.

CVE-2008-6611
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.7%
2008 1 PoC

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-6064
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors.