63 matches found
CVE-2021-39351
The CVE-2021-39351 entry concerns the WordPress plugin WP Bannerize, specifically versions 2.0.0 through 4.0.2. The vulnerability is an authenticated SQL injection via the id parameter in the ~/Classes/wpBannerizeAdmin.php file, enabling an attacker with valid credentials to exfiltrate sensitive ...
WordPress 插件 SQL注入漏洞
WordPress Plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin WP Bannerize, which stems from an id parameter in the /Classes/wpBannerizeAdmin.php file that allows an attacker to steal sensitive information from a vulnerable site...
PT-2021-22557 · WordPress · Wp Bannerize
Name of the Vulnerable Software and Affected Versions: WP Bannerize WordPress plugin versions 2.0.0 through 4.0.2 Description: The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file, which allows attacker...
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
The plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites...
WordPress WP Bannerize plugin 2.0.0 – 4.0.2 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability discovered by Margaux Dabert Intrinsec in WordPress WP Bannerize plugin versions = 2.0.0 – 4.0.2. Solution Deactivate and delete. This plugin has been closed as of July 19, 2021 and is not available for download. Reason: Security Issue...
WordPress Plugin WP-Bannerize Database Backup Leakage Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin WP-Bannerize. An attacker can exploit the vulnerability to obtain...
WordPress WP-Bannerize 4.0.2 Database Disclosure
Exploit Title : WordPress WP-Bannerize 4.0.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : undolog.com wordpress.org/plugins/wp-bannerize/ Software Download Link :...
WP Bannerize <= 2.8.6 - SQL Injection
The WP Bannerize WordPress plugin was affected by a SQL Injection security vulnerability...
WP Bannerize <= 2.8.7 - SQL Injection
The WP Bannerize WordPress plugin was affected by a SQL Injection security vulnerability...
Wordpress Plugin Bannerize <= 2.8.6 - SQL Injection
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.6 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.6 tested --- PoC -...
Wordpress Plugin Bannerize <= 2.8.7 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.7 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.7 tested...
WordPress Plugin WP Bannerize 2.8.7 - ajax_sorter.php SQL Injection
WordPress Plugin WP Bannerize 2.8.7 - ajaxsorter.php SQL Injection source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.7 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.7 tested...
WordPress Plugin Bannerize 2.8.7 - SQL Injection
WordPress Plugin Bannerize 2.8.7 - SQL Injection Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress WP Bannerize 2.8.7 SQL Injection
Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Plugin Bannerize 2.8.7 - SQL Injection
Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Bannerize Plugin 2.8.7 - SQL Injection
The Bannerize plugin's "ajaxsorter.php" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update...
WordPress Plugin WP Bannerize 2.8.7 - 'ajax_sorter.php' SQL Injection
source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress WP Bannerize 2.8.6 SQL Injection
Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code --------------- if @isset$SERVER'HTTPXREQUESTEDWITH'...