Lucene search
+L

4183 matches found

zdt
zdt
•added 2018/02/17 12:00 a.m.•67 views

Joomla Pinterest Clone Social Pinboard 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category: Webapps Tested on:...

9.7AI score0.02652EPSS
SaveExploits5
Positive Technologies
Positive Technologies
•added 2018/02/17 12:00 a.m.•2 views

PT-2018-17273

Name of the Vulnerable Software and Affected Versions: Joomla! Pinterest Clone Social Pinboard version 2.0 Description: A security issue exists in the Pinterest Clone Social Pinboard component for Joomla!, where an attacker can inject SQL code. This can be achieved through various parameters in...

9.8CVSS0.02652EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/17 12:00 a.m.•4 views

CVE-2018-5987: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pinid or userid parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVa...

9.8CVSS8.2AI score0.02652EPSS
SaveExploits5References2
exploitpack
exploitpack
•added 2018/02/16 12:00 a.m.•85 views

Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection

Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Exploit Title: Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://www.apptha.com/ Software Link: https://www.apptha.com/joomla/social-pinboard-script Version: 2.0 Category:...

7.5CVSS0.4AI score0.02652EPSS
SaveExploits5
OSV
OSV
•added 2018/02/14 3:29 p.m.•12 views

ALPINE-CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.01938EPSS
SaveExploits1References1
OSV
OSV
•added 2018/02/14 3:29 p.m.•19 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.8AI score
SaveExploits0References1
OSV
OSV
•added 2018/02/14 3:29 p.m.•9 views

DEBIAN-CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.01938EPSS
SaveExploits1References1
OSV
OSV
•added 2018/02/14 3:29 p.m.•27 views

UBUNTU-CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.3AI score0.01938EPSS
SaveExploits1References3
NVD
NVD
•added 2018/02/14 3:29 p.m.•25 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.01938EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/02/14 3:00 p.m.•45 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.7AI score0.01938EPSS
SaveExploits1References1
Mend
Mend
•added 2018/02/14 3:00 p.m.•2 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.7CVSS0.01938EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2018/02/14 3:00 p.m.•57 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.7AI score0.01938EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2018/02/14 3:00 p.m.•65 views

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.8AI score0.01938EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/14 12:00 a.m.•3 views

CVE-2018-7032: Improper Neutralization of Special Elements in Output Used by a Downstream Component

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

7.5CVSS7.5AI score0.01938EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/02/14 12:00 a.m.•2 views

PT-2018-17860

Name of the Vulnerable Software and Affected Versions myrepos versions through 1.20171231 Description The issue allows a malicious website operator or a Man-in-the-Middle MitM attacker to execute arbitrary code. This can be achieved by taking advantage of the fact that webcheckout in myrepos does...

7.5CVSS0.01938EPSS
SaveExploits1References12
OSV
OSV
•added 2018/02/12 3:29 a.m.•19 views

CVE-2018-6845

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

6.1CVSS5.8AI score0.02511EPSS
SaveExploits4References1
Prion
Prion
•added 2018/02/12 3:29 a.m.•33 views

Design/Logic Flaw

PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...

4.3CVSS6AI score0.02511EPSS
SaveExploits4References1Affected Software1
OSV
OSV
•added 2018/02/12 3:29 a.m.•20 views

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

5.4CVSS5.8AI score0.00554EPSS
SaveExploits4References1
NVD
NVD
•added 2018/02/12 3:29 a.m.•43 views

CVE-2018-6858

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

5.4CVSS5.4AI score0.00554EPSS
SaveExploits4References1
Prion
Prion
•added 2018/02/12 3:29 a.m.•27 views

Cross site scripting

Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...

3.5CVSS5.3AI score0.00554EPSS
SaveExploits4References1Affected Software1
Rows per page
Query Builder