Easy Car Script 2014 SQL Injection

Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Exploit Author: Ihsan Sencan Author Web:...

Easy Car Script 2014 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Easy Car Script 2014 - SQL Injection

Easy Car Script 2014 - SQL Injection Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Explo...

CVE-2014-4919

OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7.13 and 4.8.x before 4.8.7 allow remote attackers to assign users to arbitrary dynamical user groups...

CVE-2014-4919

OXID eShop vulnerability CVE-2014-4919 affects multiple editions (Professional/Enterprise/Community) across several branches: remote attackers can assign users to arbitrary dynamical user groups via improper access control. Affected versions include Professional before 4.7.13 and 4.8.x before 4.8...

CVE-2014-2017

CVE-2014-2017 describes a CRLF injection vulnerability in OXID eShop across multiple editions (Professional/Community/Enterprise) affecting pre-fix releases: Professional before 4.7.11 and 4.8.x before 4.8.4; Enterprise before 5.0.11 and 5.1.x before 5.1.4; Community before 4.7.11 and 4.8.x befor...

CVE-2014-4444

creationtimestamp| type| source ---|---|--- 2018-01-18 09:06:56+00:00| seen| MISP/5a60639d-e498-4c86-b6ad-1fea950d210f 2018-03-14 14:23:11+00:00| seen| MISP/5aa93037-4a24-4259-a3c0-425b950d210f...

[ASA-201801-14] nrpe: arbitrary command execution

Arch Linux Security Advisory ASA-201801-14 ========================================== Severity: High Date : 2018-01-18 CVE-ID : CVE-2013-1362 CVE-2014-2913 Package : nrpe Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-587 Summary ======= The package nrpe...

SUSE SLES12 Security Update : CaaS Platform 2.0 images (SUSE-SU-2018:0053-1)

The Docker images provided with SUSE CaaS Platform 2.0 have been updated to include the following updates: binutils : - Update to version 2.29 - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898 bsc1030589 CVE-2017-7223 - 20905 bsc1030584...

CVE-2014-9485

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...

CVE-2014-9482

Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service program crash via a crafted ELF file...

CVE-2014-9485

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...

CVE-2014-6027

CVE-2014-6027 affects TorrentFlux 2.4 with multiple cross-site scripting (XSS) vulnerabilities. An attacker can craft torrent content or links to torrent details to inject arbitrary script/HTML in a victim’s browser. Descriptions across multiple sources (NVD/CNVD/Ubuntu CVE page) confirm two vect...

CVE-2014-9482

CVE-2014-9482 is a use-after-free vulnerability in libdwarf's dwarfdump (versions 20130126 through 20140805) that could allow a remote attacker to crash the program via a crafted ELF file. The connected documents confirm the affected component, the vulnerable function surface, and the impact (den...

CVE-2014-6071

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to use of the text method inside after...

CVE-2014-6071

CVE-2014-6071 affects jQuery 1.4.2, where the vulnerability is an xss in the web page generation path caused by improper handling of the text() method inside after. The connected documents confirm the affected product/component and the root cause (XSS via text() in after) and reference explicit m...

CVE-2014-9485

CVE-2014-9485 is a directory traversal vulnerability in the minizip component (miniunz.c: do_extract_currentfile) where minizip before 1.1-5 could allow writing to arbitrary files via a crafted ZIP entry. Affected software is the minizip/miniunz.c workflow; exploitation would enable an attacker t...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:0097-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : rsync (openSUSE-2018-34)

This update for rsync fixes the several issues. These security issues were fixed : - CVE-2017-17434: The daemon in rsync did not check for fnamecmp filenames in the daemonfilterlist data structure in the recvfiles function in receiver.c and also did not apply the sanitizepaths protection mechanis...

openSUSE Security Update : tiff (openSUSE-2018-31)

This update for tiff to version 4.0.9 fixes the following issues : Security issues fixed : - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based...