Sql injection

SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...

CVE-2018-7313

SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...

CVE-2018-7313

The CVE-2018-7313 issue affects the Joomla! CW Tags component (version 2.0.6 and earlier). The vulnerability is a SQL Injection in the searchtext parameter (array form), reported for CW Tags 2.0.6, with exploit details and PoCs published ( Exploit-DB entry and related payloads). MITRE/CVSS data f...

Design/Logic Flaw

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

Student Profile Management System Script 2.0.6 - Admin Panel Authentication Bypass Vulnerability

With this exploit,Attacker can bypass admin panel Authentication. Exploit title: Student Profile Management System Script 2.0.6 - Admin Panel Authentication Bypass Dork: "Powered by: i-Net Solution" Date: 2018-02-06 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...

PHP Scripts Mall Entrepreneur Job Portal Script SQL Injection Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a set of PHP based recruitment, job search website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.6. The vulnerability can be exploited by remote attackers to...

CVE-2017-17613

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...

CVE-2017-17596

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...

Sql injection

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...

Sql injection

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearchall.php rid1 parameter...

Freelance Website Script 2.0.6 - pr_id / catid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6 Category:...

Freelance Website Script 2.0.6 - pr_id catid SQL Injection

Freelance Website Script 2.0.6 - prid catid SQL Injection Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6...

Freelance Website Script 2.0.6 - 'pr_id' / 'catid' SQL Injection

Exploit Title: Freelance Website Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/freelance-website-script/ Version: 2.0.6 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

Entrepreneur Job Portal Script 2.0.6 - jobsearch_all.php?rid1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Entrepreneur Job Portal Script 2.0.6 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/entrepreneur-job-portal-script/ Demo:...

Default credentials

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

CVE-2017-7316

CVE-2017-7316 affects Humax Digital HG100R devices running firmware 2.0.6, with a reflected XSS on the 404 page. The NVD entry describes network-exposed XSS that requires user interaction (CVSS3: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N; base 6.1). Related sources (CNVD/NVD/CVE listings) corroborate t...

Humax Digital HG100R Cross-Site Scripting Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A cross-site scripting vulnerability exists in the 404 page in version 2.0.6 of the Humax Digital HG100R. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Humax Digital HG100R Backup File Download Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A security vulnerability exists in the Humax Digital HG100R version 2.0.6. The vulnerability can be exploited by an attacker to download a backup file and obtain the router certificate in plaintext...

Humax Digital HG100R Root Credentials Disclosure Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A security vulnerability exists in the Humax Digital HG100R version 2.0.6. The vulnerability can be exploited by an attacker to obtain the root certificate from a backup file...

Humax Digital HG100R 2.0.6 XSS / Information Disclosure

Humax Digital HG100R multiple vulnerabilities Device: Humax HG100R Software Version: VER 2.0.6 - Backup file download CVE-2017-7315 An issue was discovered on Humax Digital HG100R 2.0.6 devices, a modem commonly used by ISPs to provide ADSL internet service to household and small business users...