CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

CVE-2018-5973 affects the Professional Local Directory Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in which the attacker can inject SQL commands via the sellers_subcategories.php?IndustryID parameter, or via suppliers.php with IndustryID or CategoryID parameters. Reported PoCs an...

CVE-2018-5973: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

PT-2018-17259

Name of the Vulnerable Software and Affected Versions: Professional Local Directory Script version 1.0 Description: A SQL Injection issue exists in the software, specifically via the IndustryID parameter in the "sellers subcategories.php" and "suppliers.php" files, as well as the CategoryID...

Professional Local Directory Script 1.0 - SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...

Professional Local Directory Script 1.0 SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...

Professional Local Directory Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

CVE-2015-1378

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users...

CVE-2015-1378: Undefined Security Weakness

cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users...

Dell iDRAC Local Directory Traversal Vulnerability

The Dell iDRAC7 and iDRAC8 are both remote access control cards from Dell USA. the Dell iDRAC6 is a remote management solution on the Dell PowerEdge line of servers. A local directory traversal vulnerability exists in Dell iDRAC. An attacker could exploit this vulnerability to obtain sensitive...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2017-04195)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. An information disclosure vulnerability exists in Mozilla Firefox, where a file chooser dialog box can be instantiated to...

CVE-2016-8827

NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack...

Firefox ESR Bypass Access Restriction

The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions policies or read arbitrary files by placing a specially crafted HTML document and links to it ...

DEBIAN-CVE-2016-5265

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS UXSS attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same loca...

UBUNTU-CVE-2016-5265

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS UXSS attacks or read arbitrary files, by arranging for the presence of a crafted HTML document and a crafted shortcut file in the same loca...

Same-origin policy violation using local HTML file and saved shortcut file — Mozilla

Security researcher Abdulrahman Alqabandi reported that when a local HTML file resides in the same directory as a malicious local shortcut file, the shortcut can be called by the local page to allow the page to read the contents of local files or directories or to load an arbitrary website in...

Jildi FTP Client 1.5.2 Build 1138 Buffer Overflow Exploit

Jildi FTP Client version 1.5.2 build 1138 suffers from a buffer overflow vulnerability. !/usr/bin/python Exploit Title:Jildi FTP Client Buffer Overflow Poc Version:1.5.2 Build 1138 Homepage:http://de.download.cnet.com/Jildi-FTP-Client/3000-21604-10562942.html Software...

cabextract Local Directory Traversal Vulnerability

cabextract is a set of Microsoft Cabinet file processing tools developed by software developer Stuart Caie. The tool lists, extracts and creates compressed .cab files. A local directory traversal vulnerability exists in cabextract, which arises from the program failing to adequately filter...