sqlhacker

7 exploits Active since Sep 2010
CVE-2013-2678 EXPLOITDB HIGH text WORKING POC
Cisco Linksys E4200 1.0.05 - Code Injection
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.
CVSS 8.1
CVE-2010-3486 EXPLOITDB text WRITEUP
SmarterMail 7.1.3876 - Path Traversal
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter.
CVE-2012-1503 EXPLOITDB text WORKING POC
Movable Type Pro 5.13 - Cross-Site Scripting via Comment Section
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.
CVE-2013-2684 EXPLOITDB MEDIUM text WORKING POC
Cisco Linksys E4200 1.0.05 Build 7 - Cross-Site Scripting
Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 6.1
CVE-2010-3486 EXPLOITDB text WRITEUP
SmarterMail 7.1.3876 - Path Traversal
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter.
CVE-2017-14620 EXPLOITDB MEDIUM text WORKING POC
SmarterStats 11.3.6347 - Stored Cross-Site Scripting via Referer Field in HTTP Logfiles
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.
CVSS 6.1
CVE-2010-3425 EXPLOITDB text WORKING POC
SmarterStats 5.3 - Cross-Site Scripting via frmHelp.aspx url Parameter
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter.