Cells Blog 3.3 - XSS Reflected & Blind SQLite Injection Vulnerabilities

Exploit for php platform in category web applications + Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response...

Cells Blog 3.3 - Reflected Cross-Site Scripting / Blind SQLite Injection

Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...

CVE-2012-6626

The CVE-2012-6626 entry concerns a SQL injection in verify-user.php of b2ePMS 1.0 where the username field can be exploited to execute arbitrary SQL commands. Affected software: b2ePMS 1.0 (verify-user.php). Underlying cause: input from the username field is not properly sanitized, enabling injec...

PT-2014-2395

Name of the Vulnerable Software and Affected Versions b2ePMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username field in the verify-user.php file. Recommendations For b2ePMS version 1.0, consider restricting access to the...

CVE-2012-6626: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

HDWiki 5.1 user.php SQL注入漏洞

No description provided by source...

Basic Forum by JM LLC - Multiple Vulnerabilities

Basic Forum by JM LLC - Multiple Vulnerabilities Dear Offensive Security, I have discovered some vulnerabilities in Basic Forum, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ================================================ Basic Forum by JM LLC - Multiple Vulnerabilities...

EASETHINK 1.4 /user.php SQL注入漏洞

易想团购是国内一款流行的团购管理系统软件，其v1.4版本/user.php文件代码第294行$REQUEST变量获取$id变量值，执行295行代码，拼接sql语句，执行sql语句，返回查询结果，执行代码第296-299行，判断返回结果是否为真，如果为真则执行代码第301-305行，登陆成功，执行代码第305行，拼接sql语句，其中的getclientip方法在，/system/common.php文件中定义，getclientip方法没有将值进行过滤。此过程导致任意用户登陆与SQL注入漏洞。 EASETHINK 1.4...

PT-2013-3922

Name of the Vulnerable Software and Affected Versions PHP Address Book version 8.2.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete accounts. Recommendations For PHP Address Book version 8.2.5,...

HDWiki 5.1 /control/user.php SQL注入漏洞

No description provided by source...

The latest wordpress proof absolute path method-vulnerability warning-the black bar safety net

Vulnerability file: /wp-includes/user.php...

Ecshop 2.7.3 user.php Sql注入

No description provided by source...

CVE-2011-5234

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

Sql injection

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

CVE-2011-5234

CVE-2011-5234 describes a SQL injection vulnerability in the file user.php of Social Network Community 2, exploitable via the userId parameter to allow remote execution of arbitrary SQL commands. The connected documents confirm the vulnerability type and affected component but do not provide reme...

CVE-2011-5234: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Social Network Community 2 allows remote attackers to execute arbitrary SQL commands via the userId parameter...

PT-2012-2211

Name of the Vulnerable Software and Affected Versions Social Network Community 2 affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the userId parameter in the "user.php" file. This can lead to unauthorized access and manipulation o...

CVE-2012-1602

user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...

CVE-2012-1602

CVE-2012-1602 affects NextBBS 0.6: a vulnerability in user.php allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1. This is an authentication bypass in the web app, enabling privilege escalation without user interaction beyond manipula...

CVE-2012-1602: Improper Authentication

user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...