Show filters
13 Total Results
Displaying 1-10 of 13
Sort by:
Attacker Value
Unknown
CVE-2008-2909
Disclosure Date: June 30, 2008 (last updated October 04, 2023)
SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter.
0
Attacker Value
Unknown
CVE-2008-1608
Disclosure Date: April 01, 2008 (last updated October 04, 2023)
SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583.
0
Attacker Value
Unknown
CVE-2008-0363
Disclosure Date: January 18, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to postcomment.php and the (2) album parameter to gallery.php.
0
Attacker Value
Unknown
CVE-2008-0362
Disclosure Date: January 18, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter.
0
Attacker Value
Unknown
CVE-2006-1718
Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc.
0
Attacker Value
Unknown
CVE-2006-0796
Disclosure Date: February 19, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages (privatemessages.php). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2006-0627
Disclosure Date: February 09, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Referer or (2) X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats.
0
Attacker Value
Unknown
CVE-2006-0583
Disclosure Date: February 08, 2006 (last updated February 22, 2025)
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.
0
Attacker Value
Unknown
CVE-2005-2326
Disclosure Date: July 19, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php.
0
Attacker Value
Unknown
CVE-2005-2324
Disclosure Date: July 19, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.
0
