betterfavors.com XSS vulnerability

Vulnerable URL: http://betterfavors.com/details.php?asin=%22%22%3E%3Ch1%3Eaa%3C/h1%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:48 GMT Vulnerability type:| XSS Vulnerability status:|...

Webline CMS (2016Q2) - SQL Injection Vulnerability

Document Title: =============== Webline CMS 2016Q2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1823 Release Date: ============= 2016-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 1823 Comm...

New Era Company CMS SQL Injection

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

PhotoStore details.php gid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20172/info Photostore is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execu...

Projekt Shop (details.php) Multiple SQL injection Vulnerabilities

No description provided by source...

Shimbi CMS Multiple SQL Injection Vulnerabilities

No description provided by source. Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:Powered By Shimbi CMS SQL Injection in details.php parameter --------------------------------------- http://site.com/details.php?id=sql POC -...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web...

iVote - details.php SQL Injection

iVote - details.php SQL Injection source: https://www.securityfocus.com/bid/61086/info iVote is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

iVote 1.0.0 SQL Injection

Exploit Title: iVot Sql Injection Google Dork: inurl:details.php?id= Date: 2013 July 11 Exploit Author: Ashiyane Digital Security Team Software Link: http://www.persianscript.ir/1391/09/25/ivote-poll-persian-script-download/ Version: 1.0.0 Tested on: Linux CentOS , Linux Ubunto , Windows 8...

Seven koncepts sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Seven koncepts sql Injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: www.sevenkoncepts.com Category : webapps Google dork: Powered by: Seven koncepts...

Barrie.TV Cross Site Scripting

Exploit Title : Barrie.TV Cms Cross-Site Scripting Vulnerabilitiy Author : IrIsT.Ir & Security7.Ir Discovered By : Am!r Home : http://IrIsT.Ir & http://Security7.ir Software Link : http://www.barrie.tv/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win...

Ignite Solutions CMS - car-details.php SQL Injection

Ignite Solutions CMS - car-details.php SQL Injection source: https://www.securityfocus.com/bid/53771/info Ignite Solutions CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Iberianestates.com Cross Site Scripting

Exploit Title: iberianestates.com Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.iberianestates.com Date : 03.03.2012 Platform : Php Demos Site : http://www.iberianestates.com/details.php?id="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce...

Northern Racing SQL Injection

========================================================================== Exploit Title: Northern Racing SQL Injection Vulnerability Date: 18.10.2011 Author: poach3r Software Link: http://www.northernracing.co.uk/ Tested on: Windows XP SP3 Google Dork: intext:Northern Racing Ltd...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4845

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4845: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

Shimbi CMS Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:"Powered By Shimbi CMS" SQL Injection in details.php parameter ---------------------------------------...

Shimbi CMS SQL Injection

Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:"Powered By Shimbi CMS" SQL Injection in details.php parameter --------------------------------------- http://site.com/details.php?id=sql POC ---...

Shimbi CMS - Multiple SQL Injections

Shimbi CMS - Multiple SQL Injections Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:"Powered By Shimbi CMS" SQL Injection in details.php parameter --------------------------------------- http://site.com/details.php?id=sql P...