1341 matches found
scottfriedman.net XSS vulnerability
Vulnerable URL: http://www.scottfriedman.net/wp-content/plugins/all-video-gallery/ajax.php?id=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
spacehost.de XSS vulnerability
Vulnerable URL: https://spacehost.de/blog/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| Yes, at 14.05.2017 Latest check for patch:| 14.05.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1786851 VIP website status:| No Check...
trittin.de XSS vulnerability
Vulnerable URL: https://www.trittin.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check trittin.de SSL...
druckerei-hellendoorn.de XSS vulnerability
Vulnerable URL: http://www.druckerei-hellendoorn.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
CVE-2017-6088
Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...
Alibaba Clone Script - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://b2bbusinessdirectoryscript.com/alibaba-clone-script.html Demo: http://thealidemox.com Version: N...
Alibaba Clone Script - SQL Injection
Exploit Title: Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://b2bbusinessdirectoryscript.com/alibaba-clone-script.html Demo: http://thealidemox.com Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...
Cross site scripting
A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...
CVE-2017-7205
A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...
CVE-2017-7205
GamePanelX-V3 3.0.12 contains a Cross-Site Scripting (XSS) vulnerability. The issue arises from insufficient filtration of user-supplied data passed to the GamePanelX-V3-master/ajax/ajax.php URL, allowing an attacker to execute arbitrary HTML/script in the victim’s browser. Connected sources (CNV...
CVE-2016-10148
The wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a getplugindata call before checking the updateplugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to...
Product Catalog 8 1.2 - Unauthenticated SQL Injection
$POST ‘selectedCategory’ is not escaped. UpdateCategoryList is accessible for any user...
Sirv <= 1.3.1 - Authenticated SQL Injection
$POST ‘id’ is not escaped. sirvgetrowbyid is accessible for every registered user. $id = $POST'rowid'; $row = $wpdb-getrow"SELECT FROM $tablename WHERE id = $id", ARRAYA; $row'images' = unserialize$row'images'; echo jsonencode$row;...
SQL injection vulnerability in fields parameter under source/ajax.php file of doyocms system
DOYO universal station-building system using PHP and MYSQL development, is a free open source CMS station-building, enterprise station-building system , can be widely used for personal, business, government, institutions and many other website construction. doyocms system source/ajax.php file und...
WordPress InfiniteWP Admin Panel 2.8.0 Command Injection
------------------------------------------------------------------------ Command injection in InfiniteWP Admin Panel ------------------------------------------------------------------------ Sipke Mellema, July 2016 ------------------------------------------------------------------------ Abstract...
erduo music \source\user\blog\ajax.php the variable content stored XSS
No description provided by source...
WordPress 4.5 admin-ajax.php Path traversal & DoS
Impact version WordPress 4.6 4.5.3 test by Analysis The above code can be seen, the directory traversal vulnerability is triggered in security checks before. No echo is slightly tasteless, but the attacker can use this directory through repeated read/dev/random blocking the php script, resulting ...
SecNews: Querying private posts and changing post meta
Summary --- Unauthenticated user can run arbitrary post queries and insert arbitrary numeric post meta via vulnerable /wp-content/themes/SecNews-NewCustom/functions/ajax.php file. I'm including two exploits in one report because the fix for both is the same, i.e. delete ajax.php. Run arbitrary po...
Form Lightbox - Arbitrary Option Update Leading to Admin Account
This is a plugin that is no longer in the WordPress repository, however, is still in use on some sites. With this vulnerability an attacker can update any option in the WordPress database. This includes gaining an admin access. Using the file ajax.php that contains the following line: updateoptio...