WordPress Plugin Event Registration 5.32 - SQL Injection

Wordpress Event Registration SQL injection Author: k3m4n9i Homepage: http://alko.web.id/ Date: 13 November, 2010 Software Information + Vendor : http://edgetechweb.com/ + Software Link: http://wordpress.org/extend/plugins/event-registration/ + Version: 5.32 or lower Proof of Concept - Vulnerable...

WordPress Plugin Event Registration 5.32 - SQL Injection

WordPress Plugin Event Registration 5.32 - SQL Injection Wordpress Event Registration SQL injection Author: k3m4n9i Homepage: http://alko.web.id/ Date: 13 November, 2010 Software Information + Vendor : http://edgetechweb.com/ + Software Link: http://wordpress.org/extend/plugins/event-registration...

CVE-2009-4968

SQL injection vulnerability in the Event Registration eventregistr extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Event Registration eventregistr extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4968

SQL injection vulnerability in the Event Registration eventregistr extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4968

CVE-2009-4968 concerns a SQL injection in the TYPO3 Event Registration (event_registr) extension, versions up to 1.0.0. Root cause: unsanitized input enabling arbitrary SQL execution via unspecified vectors. Impact: remote attacker can affect confidentiality, integrity, and availability. CVSSv2 b...

Null pointer dereference

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.2 on Linux allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SecureWay 3.2 Event Registration Request aka a 1.3.18.0.2.12.1 request...

CVE-2010-0312

CVE-2010-0312 affects IBM Tivoli Directory Server 6.2 on Linux; the vulnerability is in the do_extendedOp function of ibmslapd, where a crafted SecureWay 3.2 Event Registration Request (1.3.18.0.2.12.1) can trigger a NULL pointer dereference and daemon crash, resulting in a denial of service. Red...

CVE-2010-0312

The doextendedOp function in ibmslapd in IBM Tivoli Directory Server TDS 6.2 on Linux allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SecureWay 3.2 Event Registration Request aka a 1.3.18.0.2.12.1 request...

CVE-2007-5704

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...

Sql injection

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...

CVE-2007-5704

CVE-2007-5704 concerns the CodeWidgets.com Online Event Registration Template, where the (1) Email Address and (2) Password fields in login.asp and admin_login.asp are vulnerable to SQL injection. The underlying issue permits remote attackers to craft input that may result in arbitrary SQL execut...

CVE-2007-5704

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...

CodeWidget Online Event Registration Template SQL注入漏洞

CodeWidget Online Event Registration Template是一款基于ASP的WEB应用程序。 CodeWidget Online Event Registration Template不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于脚本对用户提交的EMAIL地址参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 CodeWidgets Online Event Registration Template 目前没有详细解决方案提供：...

codewidget-sql.txt

http://Aria-Security.Net ------------------------------------- CodeWidgets.Com Online Event Registration Poc Normal User account: login.asp Email address: ' UNION SELECT FROM users password: Aria-Security.Net Admin Panel: adminlogin.asp Email address: ' UNION SELECT FROM admin Password:...

Sql injection

SQL injection vulnerability in signin.aspx in WebEvents Online Event Registration Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4108

CVE-2007-4108 : Concrete details across multiple connected documents show a SQL injection vulnerability in the WebEvents (Online Event Registration Template) application, specifically in the sign_in.aspx component. The vulnerability allows an attacker to manipulate the Password parameter to execu...

CVE-2006-6007

saveprofile.asp in WebEvents Online Event Registration Template 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter...

CVE-2006-6007

The CVE-2006-6007 issue affects WebEvents (Online Event Registration Template) 2.0 and earlier, specifically save_profile.asp. The underlying flaw allows remote attackers to change profiles, passwords, and other information for arbitrary users by altering the UserID parameter. This describes a us...

Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit

No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor="000000" form method="POST" action="saveprofile.asp?key=1&regkey=" User Nameinput type="hidden" name="UserID" size="4" input...