CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 11 Last 7 days 2,779 Total CVEs 401,141 CISA KEV 1,731 Critical 42,394 All stats

Page 1

CVE-2010-2933 HIGH

SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava_code cookie to the "main page," rel…

CVSS 7.5 EPSS 0.96% Aug 4, 2010

CVE-2007-3691 MEDIUM

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to exe…

CVSS 6.8 EPSS 1.00% Jul 11, 2007

CVE-2007-3643 HIGH

admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain admi…

CVSS 10.0 EPSS 2.24% Jul 10, 2007

CVE-2007-3630 MEDIUM

changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote a…

CVSS 6.4 EPSS 2.33% Jul 10, 2007

CVE-2007-3563 HIGH

SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a vie…

CVSS 7.5 EPSS 1.21% Jul 4, 2007

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2010-2933	SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the ava_code cookie to the "main page," rel…	HIGH	7.5	0.96%	Aug 4, 2010
CVE-2007-3691	Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to exe…	MEDIUM	6.8	1.00%	Jul 11, 2007
CVE-2007-3643	admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows remote attackers to perform certain admi…	HIGH	10.0	2.24%	Jul 10, 2007
CVE-2007-3630	changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, which allows remote a…	MEDIUM	6.4	2.33%	Jul 10, 2007
CVE-2007-3563	SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a vie…	HIGH	7.5	1.21%	Jul 4, 2007

Rows per page

Showing 1 to 5 CVEs · page 1