Sql injection

In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request...

Unpatched WordPress Flaw Gives Attackers Full Control Over Your Site

UPDATE— WordPress has released version 4.9.7 to finally patch this vulnerability that could allow remote attackers to gain full control over affected websites. You are recommended to install the latest available version of WordPress as soon as possible. Last week we received a tip about an...

CVE-2018-1000556

WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...

UBUNTU-CVE-2018-1000556

WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...

Cross site scripting

WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...

CVE-2018-1000556

WordPress version 4.8 + contains a Cross Site Scripting XSS vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploitable via an attacke...

CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

Design/Logic Flaw

The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an eladmincategories deletebulk action...

VehicleWorkshop - SQL Injection

VehicleWorkshop - SQL Injection Exploit Title: VehicleWorkshop SQL Injection Data: 07.28.2017 Exploit Author: Shahab Shamsi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: ========= /viewvehiclestoremore.php ==========...

REDCap File Repository and File Upload Component Cross-Site Request Forgery Vulnerability

REDCap is a free, secure, web-based application. It is designed to support data mining research.File Repository and File Upload are among the components.File Repository is a file storage component; File Upload is a file upload component. A cross-site request forgery vulnerability exists in the...

DEBIAN-CVE-2016-4570

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service stack consumption via crafted xml file...

PHPB2B某处sql注入#6

简要描述： PHPB2B某处sql注入6 详细说明： 官网下载的最新版 virtual-office/favor.php 1-24行 Execute$sql; if !$res flash"actionfailed"; $ids = implode",", $POST'id'; $ids = "".$ids.""; 传入数组的话，就用逗号分隔，又没有单引号保护，直接可以注入。无视gpc。 此处是delete型，可以用延时注入。 演示如下： 注入前添加一个收藏，确保表中存在记录。 先不带任何参数访问。 localhost/phpb2b/virtual-office/favor.php...

TCCMS SQL注入漏洞3(盲注鸡肋)

简要描述： TCCMS SQL注入漏洞3盲注 详细说明： 在删除文章时： app/controller/news.class.php public function delete $Obj = M$this-objName; $newsObj = M"content"; $msgObj = new Msg; $id = $GET'id'; $idAry = $POST'id';//注入 $idStr = count$idAry == 0 ? intval$id : implode",", $idAry; $newIdAry = explode",", $idStr; $idSize =...

DEBIAN-CVE-2009-3582

Multiple SQL injection vulnerabilities in the delete subroutine in SQL-Ledger 2.8.24 allow remote authenticated users to execute arbitrary SQL commands via the 1 id and possibly 2 db parameters in a Delete action to the output of a VendorsReportsSearch search operation...

moinmoin -- ACL group bypass

The moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not...