5862 matches found
Joomla YJ Contact us Component Local File Inclusion Vulnerability
Exploit for php platform in category web applications ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...
WordPress Plugin Contact Form 2.7.5 - SQL Injection
WordPress Plugin Contact Form 2.7.5 - SQL Injection Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND...
WordPress Contact Form plugin <= 2.7.5 - SQL Injection
Contact Form plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Contact Form 2.7.5 SQL Injection / Patch
Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Plugin Contact Form 2.7.5 - SQL Injection
Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...
WordPress Contact Form plugin <= 2.7.5 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND...
Fast Secure 3.0.3.1 Cross Site Scripting
Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...
WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Easy Contact Form Lite plugin = 1.0.7 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/easy-contact-form-lite.zip Version:...
WordPress Easy Contact Form Lite 1.0.7 SQL Injection
Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE $settingstablename SET position = '".$position."' WHERE ID =...
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE...
WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection
Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE $settingstablename SET position = '".$position."' WHERE ID =...
XSS in Fast Secure Contact Form wordpress plugin
Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...
WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE...
Cross-site Scripting (XSS) Vulnerability in Fast Secure Contact Form
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Fast Secure Contact Form wordpress plugin, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Fast Secure Contact Form WordPress Plugin Input appended to the URL afte...
FPD и XSS уязвимости в Easy Contact для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине Easy Contact для WordPress. Full path disclosure WASC-13: http://site/wp-content/plugins/easy-contact/econtact.php http://site/wp-content/plugins/easy-contact/econtact-menu.php XSS...
Joomla Component com_isp persistent Xss Vulnerability
Exploit for php platform in category web applications =========================================== Joomla comisp persistent Xss Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1...
cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)
Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...
Insufficient Anti-automation и DoS уязвимости в CMS SiteLogic
Здравствуйте 3APA3A! В дополнение к предыдущим уязвимостям в CMS SiteLogic, сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: http://site/?mid=1 В контактной форме нет...
Contact Form Generator (EditFormLite) SQL Injection Vulnerability
================================================================= Contact Form Generator EditFormLite SQL Injection Vulnerability ================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...
Contact Form Generator SQL Injection
================================================================= Contact Form Generator EditFormLite SQL Injection Vulnerability ================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...