MC Buy and Sell Cars Script 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Buy and Sell Cars Script Script Version: V1.1 Script Buy Now: http://microcode.ws/product/mc-buy-and-sell-cars-php-script/387...

MC Buy And Sell Cars 1.1 SQL Injection

Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Buy and Sell Cars Script Script Version: V1.1 Script Buy Now: http://microcode.ws/product/mc-buy-and-sell-cars-php-script/3878 Author: Adeghsan Aencan Author Web: http://ihsan.net...

Courier Business Website Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Courier Business Website Script Script Buy Now: http://scriptfirm.com/courier-business-website Author: İhsan Şencan Author Web:...

Hindu Matrimonial Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-scrip...

My Private Tutor Website Script - Authentication Bypass

My Private Tutor Website Script - Authentication Bypass Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: My Private Tutor Website Author: İhsan Şencan Author Web: http://ihsan.net Mai...

My PHP Dating 2.0 - 'path' SQL Injection

Vulnerability: My Php Dating 2.0 - SQL Injection Web Vulnerability Google Dork: My Php Dating Date:09.01.2017 Vendor Homepage: http://www.phponlinedatingsoftware.com/demo.htm Script Name: My Php Dating Script Version: 2.0 Script Buy Now: http://www.phponlinedatingsoftware.com/order.htm Author:...

My PHP Dating 2.0 SQL Injection

Vulnerability: My Php Dating 2.0 - SQL Injection Web Vulnerability Google Dork: My Php Dating Date:09.01.2017 Vendor Homepage: http://www.phponlinedatingsoftware.com/demo.htm Tested on: http://www.phponlinedatingsoftware.com/demo/ Script Name: My Php Dating Script Version: 2.0 Script Buy Now:...

Jumia Market: Sell & Buy - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Jumia Market: Sell & Buy published at the 'play' market has multiple vulnerabilities...

Coinbase: Information disclosure of user by email using buy widget

In the Coinbase Buy Widget flow, we were displaying the last 4 digits of a user's phone number for verification purposes e.g. "we've send a code to xxx-1234". Industry standard seems to be 2 digits instead of 4, so we now mask all but the last 2 digits...

Wish Local - Buy & Sell - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wish Local - Buy & Sell published at the 'play' market has multiple vulnerabilities...

LocalTapiola: Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi

Hello, Some strange account information modification is ongoing when intercepting and making small modifications to requests in 'investment section'. Login to portal and go to buy shares https://verkkopalvelu.tapiola.fi/jb2/ltvr/purchases or similar and pic 2025 A shares, intercept requests and...

aspiranturi.ru XSS vulnerability

Vulnerable URL: http://aspiranturi.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

apparatnaya.ru XSS vulnerability

Vulnerable URL: http://apparatnaya.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

attestacija.ru XSS vulnerability

Vulnerable URL: http://attestacija.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

artriti.ru XSS vulnerability

Vulnerable URL: http://artriti.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

origin-m.bestbuy.com XSS vulnerability

Vulnerable URL: http://origin-m.bestbuy.com/bbyMobileStoreLocator/index.php?lat=26.2436599=-80.2660484=yes=33071%22%3E%3Cscript%3Econfirm%28/xssposed/%29%3C/script%3E=yes Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

digitalwallpaper.net XSS vulnerability

Vulnerable URL: http://digitalwallpaper.net/buy.php?item=SCRIPT%3E%22%3E%27%3E%3E%3C/title%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

TinyRise 最新版注射获取敏感信息

简要描述： TinyRise 最新版注射获取敏感信息 详细说明： 主要问题出在filterclass.php: public static function text$str $config = HTMLPurifierConfig::createDefault; $cachedir=Tiny::getPath'cache'."/htmlpurifier/"; if!fileexists$cachedir File::mkdir$cachedir; $config = HTMLPurifierConfig::createDefault; //配置 缓存目录...

Coinbase: Credit Card Validation Issue

Hi Coinbase, I'm not sure if this counts as a bug, but it definitely counts as a vulerability. The issue is in your credit card verification for instant purchases. The system does not or rarely check the validity of a credit card after it is added. This allows me to make instant buy purchases,...

CVE-2014-5983

The CVE-2014-5983 entry concerns the Android app Threadflip: Buy, Sell Fashion (com.threadflip.android) version 1.1.11, which does not verify X.509 certificates from SSL servers. The underlying issue is a lack of certificate validation, enabling man-in-the-middle attackers to spoof servers and ob...