MultiTier,3.1,SQL Injection

MultiTier by Beesto.com, 3.1, SQL Injection...

Joomla PayPal IPN for DOCman 3.1 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component PayPal IPN for DOCman v3.1 - SQL Injection Google Dork: inurl:index.php?option=comdocmanpaypal Date: 20.02.2017 Vendor Homepage: http://shopfiles.com/ Software Buy:...

Fedora Update for mariadb FEDORA-2017-801e01d1ed

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! Component PayPal IPN for DOCman 3.1 - id SQL Injection

Joomla! Component PayPal IPN for DOCman 3.1 - id SQL Injection Exploit Title: Joomla! Component PayPal IPN for DOCman v3.1 - SQL Injection Google Dork: inurl:index.php?option=comdocmanpaypal Date: 20.02.2017 Vendor Homepage: http://shopfiles.com/ Software Buy:...

Joomla! Component PayPal IPN for DOCman 3.1 - 'id' SQL Injection

Exploit Title: Joomla! Component PayPal IPN for DOCman v3.1 - SQL Injection Google Dork: inurl:index.php?option=comdocmanpaypal Date: 20.02.2017 Vendor Homepage: http://shopfiles.com/ Software Buy:...

Quadz School Management System 3.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo:...

CVE-2016-8358

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...

CVE-2016-8358

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...

Quadz School Management System 3.1 - uisd Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo:...

Moodle 3.1.x < 3.1.4 Multiple Vulnerabilities

Binary data 9923.prm...

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework that coul...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

DEBIAN-CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

UBUNTU-CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

Cross site scripting

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9998

Summary: SPIP 3.1.x is affected by a reflected Cross-Site Scripting vulnerability in the /ecrire/exec/info_plugin.php handler, triggered by the $plugin parameter and exploitable via a crafted /ecrire/?exec=info_plugin URL. This CVE entry corresponds to CVE-2016-9998. What’s affected: SPIP 3.1.x i...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x is vulnerable to a Reflected Cross‑Site Scripting (XSS) in the /ecrire/exec/puce_statut.php endpoint via the $id parameter (as shown by /ecrire/?exec=puce_statut). Several connected sources confirm this CVE (CVE-2016-9997) and describe it as an XSS in SPIP 3.1.x. Debian’s DLA-760-1 not...