CVE-2014-9305

SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a shortcodeproductstable action to wp-admin/admin-ajax.php...

PT-2014-8930

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter in a shortcode products table action to the "/wp-admin/admin-ajax.php"...

CVE-2014-9305: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.2 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a shortcodeproductstable action to wp-admin/admin-ajax.php...

Cart66 Lite <= 1.5.1.17 - Blind SQL Injection

The cart66-lite WordPress plugin was affected by a Blind SQL Injection security vulnerability...

WordPress Ecommerce Cart66 Lite Plugin - Blind SQL Injection

Because of this vulnerability in WordPress Ecommerce Cart66 Lite plugin , shortcodeProductsTable is accessible for every registered user. Solution Update to version 1.5.2...

Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...

WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection

WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...

CVE-2014-9101

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

CVE-2014-9101

CVE-2014-9101 affects Oxwall 1.7.0 (build 7907/7906) and SkaDate Lite 2.0 (build 7651) with multiple CSRF vulnerabilities enabling possible admin session hijack and related XSS via POST parameters (e.g., label in admin/users/roles/, lang[...] in AddAccountType, qst_name in addQuestion, form_name ...

PT-2014-8828

Name of the Vulnerable Software and Affected Versions Oxwall versions 1.7.0 build 7907 and 7906 SkaDate Lite version 2.0 build 7651 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly...

CVE-2014-9101: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

Visitors Google Map Lite module mod_visitorsgooglemap SQL Injection

An SQL injection vulnerability has been reported in Visitors Google Map Lite module Mod Visitorsgooglemap. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-7646

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7646

CVE-2014-7646 concerns the Android app EMT-Paramedic Lite (com.wEMTparamedicLite) version 0.1, where the SSL implementation fails to verify X.509 certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Connected records (N...

CVE-2014-7781

CVE-2014-7781 affects the Android app The Marijuana Handbook Lite - Weed (com.fallacystudios.marijuanahandbooklite), version 3.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and acces...

CVE-2014-7781

The Marijuana Handbook Lite - Weed aka com.fallacystudios.marijuanahandbooklite application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7646: Undefined Security Weakness

The EMT-Paramedic Lite aka com.wEMTparamedicLite application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...