CVE-2026-37604

pH7Builder (pH7 Social Dating CMS) versions through 18.2.0 are vulnerable due to improper validation of the HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR headers in the _protected/framework/Ip/Ip.class.php file. The application fails to verify if the request originates from a trusted proxy before resol...

Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing

The plugin does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers. The function wantispampgetip is vulnerable to IP spoofing because of the general usage of $SERVER'HTTPXFORWARDEDFOR' curl -i -H...

uListing < 1.7 - Unauthenticated SQL Injections

The /1/api/ulisting-page-statistics/listing REST route did not sanitise or escape the listingid and userid GET parameters before using them in a SQL statement, leading to an SQL Injection issue. The plugin also did not sanitise and escape the HTTPCLIENTIP and HTTPXFORWARDEDFOR which are then used...

mystats (hits.php) Multiple Vulnerabilities exploit

No description provided by source. myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities

Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link: http://wealthynetizen.com/wordpress-plugin-comment-rating/ Version: 2.9.32 Tested on: Fedora 18 + mys...

Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...

Nuclear-Blog v4. 0 message Board XSS vulnerability-vulnerability warning-the black bar safety net

In fact, this vulnerability, at the time the release of the Nuclear-Blog v4. 0 Source Code the day it was discovered, found that people are t00ls a core, and then I directly up, but the network disk download is still not up, so the current market for all Nuclear-Blog v4. 0 are the presence of thi...

BlueCMS getip()injection vulnerability-vulnerability warning-the black bar safety net

, Description,BlueCMS is a place to classified information portal dedicated CMS system. Procedures in using the getipfunction to get the Client ip when not strictly filter the data, resulting in sql injection vulnerability. Second, the analysis //comment.php $sql = "INSERT INTO ". table'comment'....

BBSGood Forum program moprepost. asp variable HTTP_X_FORWARDED_FOR injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. In the file moprepost. asp: if Request. ServerVariables"HTTPXFORWARDEDFOR"="" then ipdress=Request. ServerVariables"REMOTEADDR" else ipdress=Request...

BBSGood论坛程序moprepost.asp 变量HTTP_X_FORWARDED_FOR注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件moprepost.asp中： if Request.ServerVariables"HTTPXFORWARDEDFOR"="" then ipdress=Request.ServerVariables"REMOTEADDR" else ipdress=Request.ServerVariables"HTTPXFORWARDEDFOR" end if //第351行 …… sql="insert into LxTelTopic...

Joomla Module Camp26 Visitor Data 1.1 Remote code Execution

No description provided by source. Joomla Module Camp26 Visitor Data 1.1 Remote code Execution ============================================================ - Discovered by : Chip D3 Bi0s - Email : [email protected] - Date : 2010-04-28 - Severity : 9/10 CVSS scored -----------------------------...

Ilch CMS 1.1 - HTTP_X_FORWARDED_FOR SQL Injection

Ilch CMS 1.1 - HTTPXFORWARDEDFOR SQL Injection source: https://www.securityfocus.com/bid/33665/info Ilch CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

mystats-multi.txt

myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible for...

myStats (hits.php) Multiple Remote Vulnerabilities Exploit

No description provided by source. myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

myStats (hits.php) Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit url:...

mystats - hits.php Multiple Vulnerabilities

mystats - hits.php Multiple Vulnerabilities myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your...

TorrentTrader scrape.php脚本SQL注入漏洞

BUGTRAQ ID: 29451 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader在验证访问IP列表时存在SQL漏洞，远程攻击者可能利用此漏洞绕过访问限制。 如果要下载受限制的torrent，用户要登录到TorrentTrader，然后其IP储存在许可用户的列表中。当bittorrent客户端连接时，会检查这个IP地址是否为许可用户列表中的地址。...

verycms2. 0 elevation of privilege vulnerability-vulnerability warning-the black bar safety net

code: passportclient.php function Loginipwrite$winduid global $db,$timestamp,$onlineip; $logininfo="$onlineip|$timestamp|6"; $db-update "UPDATE pwuser SET lastvisit=thisvisit,thisvisit="$timestamp",onlineip="$logininfo" WHERE uid="$winduid""; Look at the$onlineip how to Global.php...

AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ AuraCMS 0 15. @mysqlquery"update useronline set timevisit='$utime' where ipproxy='$uipproxy'"; 16. else 17. @mysqlquery"insert into useronline...

auracms-blindsql.txt

!/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ------------------------------------ Audit...