Show filters
141 Total Results
Displaying 121-130 of 141
Sort by:
Attacker Value
Unknown
CVE-2008-6654
Disclosure Date: April 07, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in search_results.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
0
Attacker Value
Unknown
CVE-2008-6245
Disclosure Date: February 23, 2009 (last updated October 04, 2023)
SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2008-5292
Disclosure Date: December 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL commands via the type parameter.
0
Attacker Value
Unknown
CVE-2008-3941
Disclosure Date: September 05, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI.
0
Attacker Value
Unknown
CVE-2008-2874
Disclosure Date: June 26, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via the sbjoke_id parameter, a different vector than CVE-2008-1050.
0
Attacker Value
Unknown
CVE-2008-2845
Disclosure Date: June 25, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
0
Attacker Value
Unknown
CVE-2008-1725
Disclosure Date: April 11, 2008 (last updated October 04, 2023)
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-1201
Disclosure Date: March 11, 2008 (last updated October 04, 2023)
Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
0
Attacker Value
Unknown
CVE-2007-5999
Disclosure Date: November 15, 2007 (last updated October 04, 2023)
SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2007-5316
Disclosure Date: October 09, 2007 (last updated October 04, 2023)
SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
0
