Property Listing Script - 'propid' Blind SQL Injection

Exploit Title: Property Listing Script – Time-Based Blind Injection Date: 02.02.2017 Vendor Homepage: http://phprealestatescript.org/ Software Link: http://phprealestatescript.org/property-listing-script.html Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com...

Vizyonnet index.php parameter use SQL blind injection vulnerability

No description provided by source...

Drale DBTableViewer 100123 - Blind SQL Injection

Drale DBTableViewer 100123 - Blind SQL Injection Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...

Drale DBTableViewer 100123 - Blind SQL Injection

Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...

Drale DBTableViewer 100123 Blind SQL Injection

Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...

Tiny Tiny RSS SQL Injection Vulnerability

A blind injection vulnerability exists in $itemid in Tiny Tiny RSS processcategoryorder. An attacker is able to connect to the library database and execute database statements...

悟空CRM V0.5.4 /App/Lib/Action/FinanceAction.class.php SQL盲注

No description provided by source...

PHPBack 1.3.0 - SQL Injection

PHPBack 1.3.0 - SQL Injection / + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-v1.3.0-SQL-INJECTION.txt Vendor: ================ www.phpback.org Product: ================ PHPBack v1.3.0 Vulnerability Type: ===================...

用友某系统多处注入漏洞打包

简要描述： wooyun搜了一下，没有人提，来一发。 详细说明： 首先，该接口是无需权限访问的。 已http://.../bugs/wooyun-2010-0178322为例： ...:8080/uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IInvbasdocExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IMeasdocExportToCrmService?wsd...

Libsys图书管理系统 /opac/virtual_shelf_lst.php Oracle时间盲注

No description provided by source...

Gongwalker API Manager 1.1 Blind SQL Injection

gongwalker API Manager v1.1 - Blind SQL Injection Exploit Title: gongwalker API Manager v1.1 - Blind SQL Injection Date: 2016-01-25 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/gongwalker/ApiManager Software Link:...

YouYaX宽字节盲注

No description provided by source...

e-cology 泛微协同商务系统在/weaver/weaver.email.FileDownloadLocation存在盲注漏洞

No description provided by source...

Cisco Unified Communications Manager SQL Injection Vulnerability

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A security vulnerability exists in Cisco Unified Communications Manager 11.0 0.98000.225 that does not validate user input within a SQL query. An attacker sending a URL containing an SQL statement cou...

Arastta 1.1.5 SQL Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015 Releas...

HumHub 0.11.2 and 0.20.0-beta.2 - SQL 注入漏洞

寻找SQL注入的一般步骤： 1、寻找数据输入（表单） 2、注入数据 3、检测异常响应，像HTTP的500错误，SQL报错 该过程可以借助多种工具实现自动化。 用AWVS检测出 /index.php 可能存在SQL注入。 以下地址会报SQL错误，from 字段是注入点: http://localhost/index.php?from=1'"&limit=10&mode=activity&r=space/space/stream&sguid=e9659cfc-886f-4524-94ae-1721999ad43b...

Sendy 2.0.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title : Sendy 2.0.1 - Multiple Vulnerabilities Author : ZwX Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Tested on : Windows 7 ------------------------------ ! SQL Injection Exploit ! ------------------------------...

CmsTop媒体版某模板存在三处SQL盲注漏洞（非全部网站用户）

简要描述： 不是全部网站都安装了这几个模板，这个模板用户量一般 详细说明： 漏洞文件是/apps/rss/controller/fullsite.php中 public function getsectiondata $sectionid = $GET'sectionid'; //多个以','隔开 $outtyle = $GET'outtyle'; //输出类型 $sectionlist = $this-rss-lssection$sectionid; $data = array; foreach$sectionlist as $section if $section'data' &&...

e-cology 时间盲注（templateId参数）

1、应用：泛微e-cology2、缺陷文件：/page/maint/login/Page.jsp3、expurl:http://localhost/page/maint/login/Page.jsp?templateId=18 4、验证：sqlmap.py -u "http://localhost/page/maint/login/Page.jsp?templateId=18" --technique T --dbms "Microsoft SQL Server"...

Cyberoam CR500iNG-XP SQL Injection Vulnerability

Cyberoam NG is a next-generation firewall product based on CyberoamOS. A remote SQL blind injection vulnerability exists in Cyberoam CR500iNG-XP - 10.6.2 MR-1 and earlier versions. This vulnerability allows attackers to execute sql commands in a database...