Exponent CMS 2.3.9 Blind SQL Injection

============================================= MGC ALERT 2016-005 - Original release date: September 09, 2016 - Last revised: September 20, 2016 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2016-7400 ============================================= I...

ShoreTel Connect ONSITE - Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability Date: 19-09-2016 Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Exploit Author: Iraklis Mathiopoulos Contact:...

ShoreTel Connect ONSITE Blind SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ShoreTel Connect ONSITE Blind SQL Injection Vulnerability ======================================================================= vulnerability type: Unauthenticated Blind SQL Injection product: ShoreTel Connect ONSITE vulnerable version: 20.xx.xxxx...

ShoreTel Connect ONSITE - Blind SQL Injection

ShoreTel Connect ONSITE - Blind SQL Injection Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability Date: 19-09-2016 Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Exploit Author: Iraklis Mathiopoulos Contact: https://twitter.com/imath...

ShoreTel Connect ONSITE - Blind SQL Injection

Exploit Title: ShoreTel Connect ONSITE Blind SQL Injection Vulnerability Date: 19-09-2016 Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Exploit Author: Iraklis Mathiopoulos Contact: https://twitter.com/imath Website: https://medium.com/@iraklis Category:...

WordPress Zero Spam Plugin <= 2.1.1 - Blind SQL Injection

This plugin is prone to a blind SQL injection vulnerability. Solution Update the plugin...

WordPress Zero Spam Plugin <= 2.1.1 - Blind SQL Injection

This plugin is prone to a blind SQL injection vulnerability. Solution Update the plugin...

WordPress Zero Spam <= 2.1.1 - Unauthenticated Blind SQL Injection

The WordPress Zero Spam WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability. PoC HTTP request header: Client-IP: '+select0fromselectsleep10v+'...

SimplePHPQuiz - Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: SimplePHPQuiz - Blind SQL Injection Date: 2016-08-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/valokafor/SimplePHPQuiz Software Link:...

SimplePHPQuiz - Blind SQL Injection

SimplePHPQuiz - Blind SQL Injection Exploit Title: SimplePHPQuiz - Blind SQL Injection Date: 2016-08-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/valokafor/SimplePHPQuiz Software Link: https://github.com/valokafor/SimplePHPQuiz/archive/master.z...

SimplePHPQuiz - Blind SQL Injection

Exploit Title: SimplePHPQuiz - Blind SQL Injection Date: 2016-08-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/valokafor/SimplePHPQuiz Software Link: https://github.com/valokafor/SimplePHPQuiz/archive/master.zip Version: Latest commit Tested on:...

TeamPass <= 2.1.25 Arbitrary File Download and Unauthenticated Blind SQL Injection Vulnerability

TeamPass is prone to an arbitrary file download vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...

WordPress Plugin Ultimate Product Catalog 3.9.8 - do_shortcode via ajax Blind SQL Injection

WordPress Plugin Ultimate Product Catalog 3.9.8 - doshortcode via ajax Blind SQL Injection Exploit Title: Wordpress Ultimate-Product-Catalog getrow"SELECT FROM $cataloguestablename WHERE CatalogueID=" . $id; $CatalogueItems = $wpdb-getresults"SELECT FROM $catalogueitemstablename WHERE CatalogueID...

WordPress Ultimate Product Catalog 3.9.8 Plugin - (do_shortcode via ajax) Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: Wordpress Ultimate-Product-Catalog getrow"SELECT FROM $cataloguestablename WHERE CatalogueID=" . $id; $CatalogueItems = $wpdb-getresults"SELECT FROM $catalogueitemstablename WHERE CatalogueID=" . $id . " ORDER BY Position";...

WordPress Plugin Video Player 1.5.16 - SQL Injection

WordPress Plugin Video Player 1.5.16 - SQL Injection !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on Contribut...

Clinic Management System - Blind SQL Injection

Exploit for php platform in category web applications Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version :...

Beauty Parlour SPA Saloon Management System - Blind SQL Injection

Beauty Parlour SPA Saloon Management System - Blind SQL Injection Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage :...

Beauty Parlour & SPA Saloon Management System - Blind SQL Injection

Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...

Clinic Management System - Blind SQL Injection

Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All Versions Tested on : Apache | PHP 5.5.36 | MySQL...

Beauty Parlour & SPA Saloon Management System - Blind SQL Injection

Exploit for php platform in category web applications Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage :...