Vulnerabilidades em N/A
161.455 resultadosCVE-2017-15976—ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.EPSS 3.0%CVE-2017-17617—Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.EPSS 3.0%CVE-2017-17592—Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.EPSS 3.0%CVE-2017-17599—Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.EPSS 3.0%CVE-2017-17611—Doctor Search Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2018-6367—SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_eEPSS 3.0%CVE-2021-44132—A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary EPSS 3.0%CVE-2017-17616—Event Search Script 1.0 has SQL Injection via the /event-list city parameter.EPSS 3.0%CVE-2017-15975—Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.EPSS 3.0%CVE-2010-3841—Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web scrEPSS 3.0%CVE-2007-5540—Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the samEPSS 3.0%CVE-2017-17614—Food Order Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2008-2228—PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enaEPSS 3.0%CVE-2007-1075—TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline cEPSS 3.0%CVE-2017-17671—vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated requestEPSS 3.0%CVE-2017-6816—In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.EPSS 3.0%CVE-2014-1608—SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to exEPSS 3.0%CVE-2021-30124—The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitraEPSS 3.0%CVE-2013-6617—The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attaEPSS 3.0%CVE-2005-2712—The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (craEPSS 3.0%