9822 matches found
WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection
Exploit Title: WordPress Eventify - Simple Events plugin getresults$qry;...
WordPress Eventify - Simple Events plugin <= 1.7.f SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress Eventify - Simple Events plugin getresults$qry; 0day.today 2018-03-01...
WordPress Post Highlights 2.2 SQL Injection
Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
Ferdows CMS Pro <=1.1.0 Multiple Vulnerabilities
Exploit for asp platform in category web applications www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm...
Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities
Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix:...
WordPress Evarisk 5.1.3.6 SQL Injection
Exploit Title: WordPress Evarisk plugin getrow 'SELECT FROM ' . TABLEGROUPEQUESTION . ' where nom="' . $REQUEST'nomRacine' . '"';...
WordPress Ajax Gallery 3.0 SQL Injection
Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE optionname='agItem' and optionid=".$GET'gId' ; echo "Galeria...
WordPress Ajax Gallery plugin <= 3.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE...
WordPress WP DS FAQ plugin <= 1.3.2 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP DS FAQ plugin = 1.3.2 SQL Injection Vulnerability Date: 2011-08-18 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-ds-faq.1.3.2.zip Version: 1.3.2 tested...
WordPress Ajax Gallery plugin <= 3.0 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Ajax Gallery plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-18 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ajaxgallery.3.0.zip Version: 3.0 tested --- PoC --...
WordPress Plugin Ajax Gallery 3.0 - SQL Injection
WordPress Plugin Ajax Gallery 3.0 - SQL Injection Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE...
WordPress Plugin Ajax Gallery 3.0 - SQL Injection
Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE optionname='agItem' and optionid=".$GET'gId' ; echo "Galeria...
Mibbit AJAX IRC client service Hacked
Mibbit AJAX IRC client service Hacked Mibbit AJAX IRC client service being hacked. The proof of hack is further backed up by Mibbit's official statement. Mibbit is a web-based client for modern web browsers that supports Internet Relay Chat IRC. Mibbit connects to IRC from anywhere on almost any...
Mibbit AJAX IRC client service Hacked
Mibbit AJAX IRC client service Hacked Mibbit AJAX IRC client service being hacked. The proof of hack is further backed up by Mibbit's official statement. Mibbit is a web-based client for modern web browsers that supports Internet Relay Chat IRC. Mibbit connects to IRC from anywhere on almost any...
Meta: iPhone app XSS in Facebook Mail
From Alex Rice: Hi Jobert, Michiel - I run the Product Security team over at Facebook. ██████ just sent along a note mentioning that you're attempting to contact us with information on a XSS in Facebook's mail site. Can you share any additional details? Thanks! Our response: During a recent...
phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
No description provided by source. Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts to get the vendor to fix this flaw, he has told me to...
phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
View here: https://www.stevenroddis.com/phpbb-ajax-chatshoutbox-mod-csrf-vulnerability/ Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts ...
Ferdows CMS 9.0.5 / Ferdows CMS Pro 1.1.0 SQL Injection / XSS
www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 and Ferdows CMS =9.0.5 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro & 9.0.5 CMS Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix: N/A 1...
ajax cross-site exploits, and prevention-vulnerability and early warning-the black bar safety net
by lonely To talk about cross-site attack prevention:in ASP you can use:HTMLEncode function to prevent,while in PHP you can use htmlspecialchars; in ASP. NET can be used:HTMLEncode;the so-called Cross-Station that is due to the Web application the filter is not strict,resulting in the reception b...
Discuz! NT 2. x - 3.5.2 SQL injection(0day)-vulnerability warning-the black bar safety net
Vulnerability type: SQL injection Vulnerability description: Discuz! NT is the Kang Sheng Chong thinkComsenzits a powerful based on ASP.NET platform community software. Vulnerability analysis: ajaxtopicinfo. ascx user control poster SQL injectionvulnerability Combined with ajax. aspx call any use...