CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

CVE-2015-4678

The CVE-2015-4678 issue is a SQL injection in Persian Car CMS 1.0, exploitable via the cat_id parameter in the default URI. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as indicated by the NVD entry (CVSSv...

PT-2015-6669

Name of the Vulnerable Software and Affected Versions Persian Car CMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter to the default URI, which is vulnerable to SQL injection. Recommendations For Persian Car CM...

CVE-2015-4678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

Persian Car CMS 1.0 SQL Injection

| Title : PersianCarCMS-v.1.0 Sql Injection Vulnerability | Author : indoushka | email : [email protected] | Dork : قدرت گرفته از : Persian CAR CMS | Tested on: windows 8.1 Français V.Pro | Download : http://dl.20script.ir/script/cms/PersianCarCMS-v.1.0%5Bwww.20script.ir%5D.zip...

WordPress Car Dealer Theme - Information Disclosure

Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a /wp-admin/edit.php multiple parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in /wp-admin/post.php and /wp-admin/edit.php multiple parameter. Solution Update the plugin...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in /wp-admin/post.php and /wp-admin/edit.php multiple parameters. Solution Update the plugin...

Dennis Fisher and Mike Mimoso Discuss the 2015 Security Analyst Summit

Dennis Fisher and Mike Mimoso discuss their takeaways from the SAS 2015 conference, including the Equation Group APT analysis, hacking car washes, indexing the dark web and hacking home appliances. Download: digitalunderground187.mp3 Music by Chris Gonsalves...

Holes in Progressive Dongle Could Lead to Car Hacks

A device that a popular car insurance company sends to customers to keep track of their driving and reduce their rate may be insecure and could be used to take control of a user’s vehicles. Progressive manufactures the device, a dongle called Snapshot that plugs into the OBD-II diagnostic port on...

Automakers Move to Address Privacy Concerns

Several automakers have agreed on a set of privacy principles that they say will govern the way that they handle personal information generated by vehicles, geolocation data and other sensitive information that is being produced by in-car computers and networks. The principles are the result of...

Information disclosure

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7649

The CVE-2014-7649 entry concerns the Android app The Classic Car Buyer (com.magazinecloner.carbuyer) @7F08017A. It states that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

PT-2014-8161

Name of the Vulnerable Software and Affected Versions The Classic Car Buyer aka com.magazinecloner.carbuyer application version @7F08017A Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to...

CVE-2014-7649: Undefined Security Weakness

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7564

The Simple Car Care Tip and Advice aka com.a1481542198504ee106f182c8a.a40350826a application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Simple Car Care Tip and Advice aka com.a1481542198504ee106f182c8a.a40350826a application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7564

CVE-2014-7564 affects the Android app Simple Car Care Tip and Advice (1.03). The vulnerability is that the application does not verify SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The CVSS data indicates ...

PT-2014-8095

Name of the Vulnerable Software and Affected Versions The Simple Car Care Tip and Advice aka com.a1481542198504ee106f182c8a.a40350826a application version 1.03 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers...