Exploitdb Exploits

CVE-2005-2467 EXPLOITDB text VERIFIED

MySQL Eventum <= 1.5.5 - Cross-Site Scripting via id, release, or F Parameter

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

by GulfTech Security

View

CVE-2005-2467 EXPLOITDB text VERIFIED

MySQL Eventum <= 1.5.5 - Cross-Site Scripting via id, release, or F Parameter

Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

by GulfTech Security

View

CVE-2005-2560 EXPLOITDB text VERIFIED

CFBB 1.1.0 - Cross-Site Scripting via Page Parameter

Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

by rUnViRuS

View

CVE-2005-2483 EXPLOITDB text VERIFIED

Karrigell < 2.1.8 - Remote Code Execution via Modified Arguments to .ks Script

Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script.

by Radovan Garabík

View

EIP-2026-111665 EXPLOITDB text VERIFIED

Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass

by VaLiuS

View

CVE-2005-2460 EXPLOITDB text VERIFIED

Kayako liveResponse 2.x - Cross-Site Scripting via Username Parameter or Name Field

Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.

by GulfTech Security

View

CVE-2005-2461 EXPLOITDB text VERIFIED

Kayako liveResponse 2.x - SQL Injection via Calendar Year or Date Parameter

Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter.

by GulfTech Security

View

CVE-2005-2441 EXPLOITDB text VERIFIED

vbzoom - Cross-Site Scripting via UserName or UserID Parameter

Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

by almaster

View

CVE-2005-2441 EXPLOITDB text VERIFIED

vbzoom - Cross-Site Scripting via UserName or UserID Parameter

Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.

by almaster

View

EIP-2026-106735 EXPLOITDB text VERIFIED

Easypx41 - Multiple Variable Injection Vulnerabilities

by FalconDeOro

View

EIP-2026-106734 EXPLOITDB text VERIFIED

Easypx41 - Multiple Cross-Site Scripting Vulnerabilities

by FalconDeOro

View

CVE-2005-2432 EXPLOITDB text VERIFIED

phplist - SQL Injection via Admin Page ID Parameter

SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) members or (2) admin.

by tgo

View

EIP-2026-100732 EXPLOITDB text VERIFIED

@Mail 4.0/4.13 - Multiple Cross-Site Scripting Vulnerabilities

by Lostmon

View

EIP-2026-118767 EXPLOITDB text VERIFIED

MDaemon 8.0 - Content Filter Directory Traversal

by Tan Chew Keong

View

EIP-2026-105901 EXPLOITDB text VERIFIED

Clever Copy 2.0 - Private Message Unauthorized Access

by Lostmon

View

CVE-2005-2324 EXPLOITDB text VERIFIED

Clever Copy 2.0 and 2.0a - Cross-Site Scripting via Search Parameters

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.

by Lostmon

View

CVE-2005-2324 EXPLOITDB text VERIFIED

Clever Copy 2.0 and 2.0a - Cross-Site Scripting via Search Parameters

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.

by Lostmon

View

EIP-2026-105569 EXPLOITDB text VERIFIED

BMForum 3.0 - 'topic.php' Cross-Site Scripting

by Lostmon

View

EIP-2026-105568 EXPLOITDB text VERIFIED

BMForum 3.0 - 'post.php' Cross-Site Scripting

by Lostmon

View

EIP-2026-105567 EXPLOITDB text VERIFIED

BMForum 3.0 - 'forums.php' Cross-Site Scripting

by Lostmon

View

EIP-2026-105566 EXPLOITDB text VERIFIED

BMForum 3.0 - 'announcesys.php' Cross-Site Scripting

by Lostmon

View

EIP-2026-113033 EXPLOITDB text VERIFIED

VBZoom Forum 1.11 - 'show.php' SQL Injection

by abducter_minds@yahoo.com

View

EIP-2026-111379 EXPLOITDB text VERIFIED

PNG Counter 1.0 - 'Demo.php' Cross-Site Scripting

by ArCaX-ATH

View

CVE-2005-2397 EXPLOITDB text VERIFIED

phpBook 1.46 - Cross-Site Scripting via Admin Parameter

Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary web script or HTML via the admin parameter.

by rgod

View

CVE-2005-2386 EXPLOITDB text VERIFIED

CartWIZ 1.20 - Cross-Site Scripting via viewCart.asp Message Parameter

Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

by Zinho

View