CVE-2017-15982

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15983

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981

CVE-2017-15981 affects the Text/Content CMS “Responsive Newspaper Magazine & Blog CMS 1.0.” The vulnerability is SQL Injection via the id parameter on admin/admin_process.php during form editing. It is confirmed in multiple sources (NVD entry; related advisories and exploit references) and is exp...

CVE-2017-15982

CVE-2017-15982 affects Dynamic News Magazine & Blog CMS 1.0. The vulnerability is an SQL injection via the id parameter to admin/admin_process.php used during form editing, allowing an attacker to inject SQL commands. Multiple sources corroborate the issue across CVE records and public advisories...

CVE-2017-15983

Affected software: MyMagazine Magazine & Blog CMS 1.0. Vulnerability: SQL Injection via the id parameter to admin/admin_process.php during form editing (e.g., id=[SQL]). Root cause is improper input handling allowing crafted SQL payloads to be executed by the backend. Impact (as stated): Exploita...

CVE-2017-15983: Improper Neutralization of Special Elements used in an SQL Command

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14336

Name of the Vulnerable Software and Affected Versions Responsive Newspaper Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For Responsive Newspaper Magazine & Blog CMS version 1.0, avoid...

CVE-2017-15982: Improper Neutralization of Special Elements used in an SQL Command

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14338

Name of the Vulnerable Software and Affected Versions MyMagazine Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For MyMagazine Magazine & Blog CMS version 1.0, avoid using the id...

PT-2017-14337

Name of the Vulnerable Software and Affected Versions Dynamic News Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to the "admin/admin process.php" endpoint for form editing. Recommendations For Dynamic News Magazine & Blog CMS version 1.0, avoid...

CVE-2017-15981: Improper Neutralization of Special Elements used in an SQL Command

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

News 1.0 - SQL Injection

News 1.0 - SQL Injection Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/...

MyMagazine 1.0 - 'id' SQL Injection

Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468 Demo: http://demo.geniusocean.com/mymagazine/...

Newspaper 1.0 - SQL Injection

Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo: http://demo.geniusocean.com/newspaper/ Version: 1.0 Category:...

News 1.0 - SQL Injection

Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...

jQuery Blog Gets Hacked – Hackers Compromise CoinHive’s DNS

By Waqas In two different incidents, security of high profile platforms was This is a post from HackRead.com Read the original post: jQuery Blog Gets Hacked Hackers Compromise CoinHives DNS...

jQuery Official Blog Hacked — Stay Calm, Library is Safe!

The official blog of jQuery—most popular JavaScript library used by millions of websites—has been hacked by some unknown hackers, using the pseudonym "str0ng" and "n3tr1x." jQuery's blog website blog.jquery.com runs on WordPress—the world's most popular content management system CMS used by...

blog.zoodfood.com XSS vulnerability

Open Bug Bounty ID: OBB-363666 Description| Value ---|--- Affected Website:| blog.zoodfood.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

blog.eset.ro XSS vulnerability

Open Bug Bounty ID: OBB-363616 Description| Value ---|--- Affected Website:| blog.eset.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...