1290 matches found
CVE-2015-4610: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
SQL Injection vulnerability in extension Store Locator (locator)
It has been discovered that the extension "Store Locator" locator is susceptible to SQL Injection Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 3.3.0 and below Vulnerability Type: SQL...
WordPress Store Locator Plus Plugin <= 4.2.23 - Email Injection
Plugin is prone to an email injection vulnerability. Solution Update this plugin...
WordPress Store Locator Plugin <= 3.33.1 - SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...
WordPress Store Locator Plus Plugin <= 3.8.6 - SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update plugin...
WordPress Store Locator Plugin <= 2.6.1 - Cross Site Request Forgery
This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities of the samba-winbind-krb5-locator-3.5.6 package for the Red Hat Enterprise Linux operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The Samba4-winbind-krb5-locator-4.0.0 package from the CentOS operating system has multiple vulnerabilities. Its operation may lead to violations of the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the samba-winbind-krb5-locator-4.1.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited...
Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities of the samba4-winbind-krb5-locator-4.0.0 package for the Red Hat Enterprise Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information...
Wordpress Ajax Store Locator SQL Injection Vulnerability
WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. A SQL injection vulnerability exists in Wordpress Ajax Store Locator. An attacker can exploit this vulnerability to compromise the application, access or modify...
WordPress Ajax Store Locator 1.2 SQL Injection
Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending pr...
WordPress Ajax Store Locator 1.2 SQL Injection Vulnerability
WordPress Ajax Store Locator versions 1.2 and below suffer from a remote SQL injection vulnerability. Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SE...
WordPress Ajax Store Locator Plugin 1.2 - SQL Injection
This WordPress Ajax Store Locator plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection
Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending provided level 1 and risk 1 values? Y/n 18:24...
Ajax Store Locator <= 1.2 - Remote SQL Injection
The ajax-store-locator WordPress plugin was affected by a Remote SQL Injection security vulnerability. http://www.example.com/wordpress/wp-admin/admin-ajax.php?action=sldalsearchlocation&funMethod=SearchStore&Location=Social&StoreLocation=11 AND SELECT FROM SELECTSLEEP10LCKZ...
Wordpress Plugin Ajax-Store-Locator 1.2 /ajax-store-locator-wordpress_0/sl_file_download.php 任意文件下载漏洞
No description provided by source...
WordPress Store Locator 3.33.1 - SQL Injection
Using a combination of GET fields, it is possible to perform a SQL Injection attack using the ‘sl-xml.php’ script. This injection is performed on the LIMIT of the SQL query, however retrieving data via this vulnerability is very easy, due to the outputting of the resulting SQL error by the script...