503 matches found
Sql injection
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...
CVE-2017-17576
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter...
CVE-2017-17589
FS Thumbtack Clone 1.0 contains a SQL Injection vulnerability in browse-category.php (cat parameter) and browse-scategory.php (sc parameter). The root cause is improper input handling allowing an attacker to inject arbitrary SQL commands. Exploitation is evidenced by published PoC/exploit referen...
CVE-2017-17589
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parameter...
CVE-2017-17576
FS Gigs Script 1.0 contains an SQL Injection vulnerability in browse-category.php (cat), browse-scategory.php (sc), and service-provider.php (ser). The root cause is unsanitized input parameters, enabling the execution of arbitrary SQL commands on the backend. Affected software is FS Gigs Script ...
FS Gigs Script 1.0 - 'cat' / 'sc' SQL Injection
Exploit Title: FS Gigs Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/gigs-script/ Demo: http://gigs.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...
FS Thumbtack Clone 1.0 - cat sc SQL Injection
FS Thumbtack Clone 1.0 - cat sc SQL Injection Exploit Title: FS Thumbtack Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/thumbtack-clone/ Demo: http://thumbtack-clone.demonstration.co.in/ Version:...
UserPro <= 4.9.17 - Authentication Bypass
The userpro plugin has the ability to bypass login authentication for the user 'admin'. If the site does not use the standard username 'admin' it is not affected. 1 - Google Dork inurl:/plugins/userpro 2 - Browse to a site that has the userpro plugin installed. 3 - Append ?upautolog=true to the...
iTech Gigs Script SQL Injection Vulnerability
iTech Gigs Script is an e-commerce website building system. The system features user registration, quotes and comments. A SQL injection vulnerability exists in iTech Gigs Script version 1.21. A remote attacker can inject SQL commands by sending the 'sc' parameter to the browse-scategory.php file ...
CVE-2017-15963
iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter...
CVE-2017-15963
iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter...
CVE-2017-15963
CVE-2017-15963 affects the iTech Gigs Script version 1.21. The vulnerability is a SQL injection in two entry points: the browse-scategory.php file via the parameter sc and the service-provider.php file via the parameter ser . Public reports, exploits, and the CVE description consistently describe...
CVE-2017-15963
iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter...
elib-a.ucl.ac.uk XSS vulnerability
Vulnerable URL: http://elib-a.ucl.ac.uk/////browse-list.php?country=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5198 VIP website status:| Yes Coordinated Disclosure Timeline:...
logosradionetwork.com XSS vulnerability
Open Bug Bounty ID: OBB-297872 Description| Value ---|--- Affected Website:| logosradionetwork.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
rottentomatoes.com XSS vulnerability
Vulnerable URL: https://www.rottentomatoes.com/browse/dvd-streaming-all/?services=...
gateway.okhistory.org XSS vulnerability
Vulnerable URL: http://gateway.okhistory.org/explore/partners/OKHS/browse/?fq=strtitleserial:The%2520Harmon%2520County%2520Tribune'%22%26%25prompt/OPENBUGBOUNTY/...
cimbor.net XSS vulnerability
Vulnerable URL: https://cimbor.net/user/browse/ ?searchgender=gender from=from to=to country=countryalert'OPENBUGBOUNTY'...
leespring.be XSS vulnerability
Vulnerable URL: http://www.leespring.be/browsecatalog.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check leespring.be SSL...