67 matches found
CVE-2021-39351
The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2...
Sql injection
The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2...
CVE-2021-39351 WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2...
CVE-2021-39351 WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2...
CVE-2021-39351
The WP Bannerize WordPress plugin (versions 2.0.0 - 4.0.2 ) is vulnerable to authenticated SQL injection . The root cause is an insecure id parameter within the ~/Classes/wpBannerizeAdmin.php file, which allows authenticated attackers to exfiltrate sensitive information from affected sites. As a ...
PT-2021-22557 · WordPress · Wp Bannerize
Name of the Vulnerable Software and Affected Versions: WP Bannerize WordPress plugin versions 2.0.0 through 4.0.2 Description: The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file, which allows attacker...
WordPress 插件 SQL注入漏洞
WordPress Plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin WP Bannerize, which stems from an id parameter in the /Classes/wpBannerizeAdmin.php file that allows an attacker to steal sensitive information from a vulnerable site...
WordPress WP Bannerize plugin 2.0.0 – 4.0.2 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability discovered by Margaux Dabert Intrinsec in WordPress WP Bannerize plugin versions = 2.0.0 – 4.0.2. Solution Deactivate and delete. This plugin has been closed as of July 19, 2021 and is not available for download. Reason: Security Issue...
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
The plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites...
WordPress Plugin WP-Bannerize Database Backup Leakage Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin WP-Bannerize. An attacker can exploit the vulnerability to obtain...
WordPress WP-Bannerize 4.0.2 Database Disclosure
Exploit Title : WordPress WP-Bannerize 4.0.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : undolog.com wordpress.org/plugins/wp-bannerize/ Software Download Link :...
WP Bannerize <= 2.8.7 - SQL Injection
The WP Bannerize WordPress plugin was affected by a SQL Injection security vulnerability...
WP Bannerize <= 2.8.6 - SQL Injection
The WP Bannerize WordPress plugin was affected by a SQL Injection security vulnerability...
Wordpress Plugin Bannerize <= 2.8.6 - SQL Injection
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.6 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.6 tested --- PoC -...
Wordpress Plugin Bannerize <= 2.8.7 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.7 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.7 tested...
WordPress WP Bannerize 2.8.7 SQL Injection
Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Plugin Bannerize 2.8.7 - SQL Injection
Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Plugin WP Bannerize 2.8.7 - ajax_sorter.php SQL Injection
WordPress Plugin WP Bannerize 2.8.7 - ajaxsorter.php SQL Injection source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP Bannerize plugin = 2.8.7 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-bannerize.zip Version: 2.8.7 tested...
WordPress Plugin Bannerize 2.8.7 - SQL Injection
WordPress Plugin Bannerize 2.8.7 - SQL Injection Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...