CVE-2020-5307

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

Karenderia Multiple Restaurant System 5.3 - SQL Injection

Karenderia Multiple Restaurant System 5.3 - SQL Injection =========================================================================================== Exploit Title: Karenderia CMS 5.3 - Multiple SQL Vuln. Dork: N/A Date: 05-07-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection

An endpoint of the API, which is exposed when the 'use cache plugin' setting is enabled by default disabled, is vulnerable to an unauthenticated blind SQLi issue. PoC time curl -X POST 'http://host/wp-json/wpstatistics/v1/hit' --data...

Starbucks: Blind SQLi leading to RCE, from Unauthenticated access to a test API Webservice

@geekjeremy, at the same time as other hackers who submitted their own reports, discovered a browsable WSDL service on an API endpoint under the starbucks.com.cn domain, running on a non-standard port. @geekjeremy demonstrated that the service had several functions that executed without any...

ICE HRM 23.0 SQL / Iframe Injection

=========================================================================================== Exploit Title: ICE HRM - aoba SQL Inj. Dork: N/A Date: 14-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://icehrm.org Software Link: https://sourceforge.net/projects/icehrm/ Version: v23.0...

Alienvault OSSIMUSM 5.3.1 - SQL Injection

Alienvault OSSIMUSM 5.3.1 - SQL Injection Details ======= Product: Alienvault OSSIM/USM Vulnerability: SQL Injection Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8582 Vulnerable Versions: =5.3.1 Fixed Version: 5.3.2 Vulnerability Details ===================== A SQL injection vulnerability...

WordPress Plugin Ultimate Membership Pro 3.3 - SQL Injection

Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass Time line: Found 07-Jun-2016, Vendor notified...

GigPress <= 2.3.10 - Authenticated XSS & Blind SQLi

The GigPress WordPress plugin was affected by an Authenticated XSS & Blind SQLi security vulnerability...

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution CVEs: CVE-2015-1560, CVE-2015-1561 Vendor: Merethis - www.centreon.com Product: Centreon Version affected: 2.5.4 and prior Product description: Centreon is the choice of some of the world's largest companies...

ManageEngine Applications Manager DowntimeSchedulerServlet 'TASKID' Blind SQLi

The remote host is running a version of ManageEngine Applications Manager that is affected by a blind SQL injection vulnerability due to improper validation of user-supplied input to the 'TASKID' parameter in the 'DowntimeSchedulerServlet' servlet. A remote attacker can exploit this flaw to execu...

ECCMS 1.0 Cross Site Scripting / SQL Injection

===================================================================== Advisory: ECCMS 1.0 - Multiple Vulnerabilities Author: R3VANBASTARD - Yogyakarta Dork: "Powered by Econnective" / Powered by Econnective inurl:/admin =====================================================================...

WordPress Content Audit 1.6 Blind SQL Injection

Details ================ Software: Content Audit Version: 1.6 Homepage: http://wordpress.org/plugins/content-audit/ Advisory report: https://security.dxw.com/advisories/blind-sqli-vulnerability-in-content-audit-could-allow-a-privileged-attacker-to-exfiltrate-password-hashes/ CVE: CVE-2014-5389...

XRMS - Blind SQL Injection and Command Execution

No description provided by source. XRMS Blind SQLi via $SESSION poisoning, then command exec import urllib import urllib2 import time import sys usercharac =...

XRms - Blind SQL Injection / Command Execution

XRMS Blind SQLi via $SESSION poisoning, then command exec import urllib import urllib2 import time import sys usercharac = 'a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z','@','.','','-','1','2','3','4','5','6','7','8','9','0' userascii = 97,...

Symantec Web Gateway 5.0.3.18 (deptUploads_data.php groupid parameter) Blind SQLi

No description provided by source. !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url =...

Joomla RokModule Component (index.php, module parameter) Blind SQLi

No description provided by source. Titulo: Joomla Component RokModule Blind SQLi module Vulnerability Nombre del Componente: Comrokmodule Empresa: http://www.rockettheme.com/ Testeado: Linux Backtrack Autor: Yarolinux Para WebSecurityDev Twitter: @Yarolinux Fecha: 09/09/2012 Bueno la Injeccion Va...

Joomla Component RokModule Blind SQLi [moduleid] Vulnerability

No description provided by source. ================================================================================================================== o Joomla Component RokModule Blind SQLi moduleid Vulnerability Software : comrokmodule version 1.1 Vendor : http://www.rockettheme.com/ Author :...

Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers

No description provided by source. Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012:...

E-PHP B2B Marketplace Multiple Vulns

No description provided by source. / Name : E-PHP B2B Marketplace Multiple Vulns WebSite : http://www.ephpscripts.com/b2b-trading-portal.php Price : 150 USD Author : Hamza 'MizoZ' N. Email : [email protected] / XSS - genconfirm.php shows the error message of $GET'errmsg' , but it's not protected...

Softbiz PHP Joke Site Software Multiple SQL Injection Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...