WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection

Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link: http://downloads.wordpress.org/plugin/moodthingy-mood-rating-widget.0.8.7.zip Version: 0.8.7 =====================...

WordPress Paid Business Listings v1. 0. 2 blind-vulnerability warning-the black bar safety net

Title: WordPress Paid Business Listings v1. 0. 2 Blind SQL Injection Author: Chris Kellum Program website: http://www.blazingtorch.com/ Download address: http://downloads.wordpress.org/plugin/paid-business-listings.1.0.2.zip Impact version: 1.0.2 Plug-in details This plugin has a 3 stage process,...

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link:...

WordPress Paid Business Listings v1.0.2 Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link:...

WordPress Paid Business Listings Plugin 1.0.2 - Blind SQL Injection

This WordPress Paid Business Listings plugin is prone to a blind SQL injection. Input data from the form submission is not properly sanitized and false statements will not appear on the busines listings page, while true statements will result in the listing appearing on the business listings page...

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection

Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link: http://downloads.wordpress.org/plugin/paid-business-listings.1.0.2.zip Version: 1.0.2 ============== Plugin Details...

Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------------- Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability ----------------------------------------------------------------------------- Author....: fame...

Parodia 6.8 employer-profile.asp Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

UCCASS 1.8.1 Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...

UCCASS 1.8.1 - Blind SQL Injection

UCCASS 1.8.1 - Blind SQL Injection :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2...

UCCASS 1.8.1 - Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...

MyTickets Blind SQL Injection

count'languages',"id='".$cookies'language'."'" == 0 48. $language = $setting'defaultlanguage'; 49. 50. $language = $cookies'language'; 52. 52. 53. $languagearray = $db-fetch$db-query"SELECT FROM languages WHERE id='".$language."'"; / print...

ADICO CMS v1.1 - Blind SQL Injection Vulnerability

Title: ====== ADICO CMS v1.1 - Blind SQL Injection Vulnerability Date: ===== 2012-05-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=582 VL-ID: ===== 582 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ============= ADICO i...

MyTickets 1.x < 2.0.8 - Blind SQL Injection

count'languages',"id='".$cookies'language'."'" == 0 48. $language = $setting'defaultlanguage'; 49. 50. $language = $cookies'language'; 52. 52. 53. $languagearray = $db-fetch$db-query"SELECT FROM languages WHERE id='".$language."'"; / print...

XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities

No description provided by source. $------------------------------------------------------------------------------------------------------------ $ XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download...

Blind SQL Injection in Webmatic

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Webmatic, which can be exploited to perform Blind SQL Injection attacks. 1 Blind SQL Injection in Webmatic: CVE-2012-3350 1.1 Input passed via the "Referer:" field of the HTTP header to index.php is not properly sanitised...

Joomla Joomsport SQL Injection / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data...

Joomla! Component Joomsport - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Webspell FIRSTBORN Movie-Addon - Blind SQL Injection

Webspell FIRSTBORN Movie-Addon - Blind SQL Injection ======================================================================================== | Title : Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell FIRSTBORN Movie-Addon | Site :...