4254 matches found
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using ...
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Square: Blind SQL injection in www.bookfresh.com
The resource at /reservations doesn't properly sanitise the "client" variable before putting it into a MySQL statement. This results in a Blind SQL Injection vulnerability. We can demonstrate the vulnerability by making the SQL server wait for a while before responding. PoC wait a while:...
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...
SendIt <= 1.5.9 - Blind SQL Injection
The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...
NextGEN Smooth Gallery - Blind SQL Injection
The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...
UPM-POLLS 1.0.4 - BLIND SQL injection
The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...
Disqus Blog Comments <= 2.77 - Blind SQL Injection
The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability...
WP-Predict 1.0 - Blind SQL Injection
The wp-predict WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Paid Business Listings - Blind SQL Injection
Form Submission pbllistingpkgid Parameter...
Related Sites 2.1 - Blind SQL Injection
The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Yahoo!: caesary.yahoo.net Blind Sql Injection
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
XDCMS企业管理系统SQL #3
简要描述： rt 详细说明： public function editsave $this-memberinfo; $userid=intvalCookie::getcookie'memberuserid'; $fields=$POST'fields'; //������ $fieldsql=''; foreach$fields as $k=$v $fvalue=$v; ifisarray$v $fvalue=implode',',$v; $fieldsql.=",$k='".safehtml$fvalue."'"; $fieldsql=substr$fieldsql,1;...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
CU Village CMS Site 1.0 (print_view) Blind SQL Injection Vulnerability
No description provided by source...
Opsview pre 4.4.1 - Blind SQL Injection
No description provided by source. CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsview is a syste...
mod_accounting Module 0.5 - Blind SQL Injection
No description provided by source. - Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Eldar Wireghoul...