227 matches found
Joomla DT Register Component - cat SQL Injection Vulnerability
Exploit for php platform in category web applications Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...
Joomla! Component DT Register - cat SQL Injection
Joomla! Component DT Register - cat SQL Injection Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...
Cross site scripting
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks...
Joomla com_registrationpro SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Joomla comregistrationpro SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comregistrationpro Vendor Homepage : http://www.joomlashowroom.com/ version : 3.2.12 - 3.2.10 Tested on: BACKBOX...
Event Registration Pro,3.2.12 - 3.2.10,SQL Injection
Event Registration Pro,3.2.12 - 3.2.10,SQL Injection resolution: update to 3.2.13 update notice: https://www.joomlashowroom.com/blog/event-registration-pro-3-2-13-released-security-release...
Joomla Registration Pro 3.2.12 SQL Injection
| / \ | \ / | | | | | / | \ / / \ / \ | | | | | | || | | | | | = 5.0 boolean-based blind - Parameter replace Payload: option=comregistrationpro&view=calendar&Itemid=27&...
WordPress Event Registration Plugin <= 6.02.02 - Multiple Vulnerabilities
This plugin is prone to SQL injection and stored cross site scripting vulnerabilities. Solution Update the plugin...
Event Registration 6.02.02 - SQL Injection & Stored XSS
The event-registration WordPress plugin was affected by a SQL Injection & Stored XSS security vulnerability...
WordPress Event Registration 6.02.02 XSS / SQL Injection
Exploit Title: WordPress Plugin event-registration 6.02.02: SQL-Injection and persistent XSS Discovery Date: 2016/03/13 Public Disclosure Date: 2016/05/09 Exploit Author: Michael Helwig Contact: https://twitter.com/c0dmtr1x | https://codemetrix.net Vendor Homepage: http://wpeventregister.com/...
Event Registration <= 5.43 - SQL Injection
The event-registration WordPress plugin was affected by a SQL Injection security vulnerability...
Event Registration 5.32 - SQL Injection
The event-registration WordPress plugin was affected by a SQL Injection security vulnerability...
Wordpress Event Registration plugin <= 5.44 SQL Injection Vulnerability
No description provided by source. Exploit Title: Wordpress Event Registration plugin = 5.44 SQl Injection Vulnerability Google Dork: ?regeventaction=register&eventid Date: 2011-09-09 Author: serk Vendor: http://edgetechweb.com/ Software Link:...
CEScripts Multiple Scripts Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execu...
Wordpress Event Registration Plugin 5.32 SQL Injection Vulnerability
No description provided by source. Wordpress Event Registration SQL injection Author: k3m4n9i Homepage: http://alko.web.id/ Date: 13 November, 2010 Software Information + Vendor : http://edgetechweb.com/ + Software Link: http://wordpress.org/extend/plugins/event-registration/ + Version: 5.32 or...
WordPress Event Registration plugin <= 5.4.3 - SQL Injection
No description provided by source. Exploit Title: WordPress Event Registration plugin = 5.4.3 SQL Injection Vulnerability Date: 2011-08-30 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/event-registration.5.43.zip Version: 5.4.3...
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit
No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor=000000 form method=POST action=saveprofile.asp?key=1®key= User Nameinput type=hidden name=UserID size=4 input type=text...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 scope parameter to index.php; 2 username, 3 dbemphone, 4 useremail, or 5...
DEBIAN-CVE-2014-0028
libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:searchdomains restrictions in ACLs and obtain sensitive domain object information via a request to the 1 virConnectDomainEventRegister and 2 virConnectDomainEventRegisterAny functions in the...
CVE-2014-0028
libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:searchdomains restrictions in ACLs and obtain sensitive domain object information via a request to the 1 virConnectDomainEventRegister and 2 virConnectDomainEventRegisterAny functions in the...
CVE-2014-0028
libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:searchdomains restrictions in ACLs and obtain sensitive domain object information via a request to the 1 virConnectDomainEventRegister and 2 virConnectDomainEventRegisterAny functions in the...