WordPress Training Membership 1.0.8 Cross Site Scripting Vulnerability

WordPress Fitness Trainer - Training Membership plugin versions 1.0.8 and below suffer from a cross site scripting vulnerability. Exploit Title: Wordpress Fitness Trainer - Training Membership Plugin ================== 8bitsec - https://twitter.com/8bitsec 0day.today 2018-04-09...

Zomato: [www.zomato.com/dubai/gold] CRITICAL - Allowing arbitrary amount to become a GOLD Member

Hacker was able to find the internal testing Zomato Gold membership. I was able to purchase the PREMIUM GOLD MEMBERSHIP by selecting the amount of our own choice, here it required two conditions first is that you must have a valid premium membership. So, when I looked up the cost of the membershi...

pubs.aaas.org XSS vulnerability

Open Bug Bounty ID: OBB-257060 Description| Value ---|--- Affected Website:| pubs.aaas.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yellowpages.biz.pk XSS vulnerability

Vulnerable URL: http://www.yellowpages.biz.pk/membership.asp?fill=on=38%20=%20=0%20=%20=1"...

Zenbership CMS Version Detection

Detects the installed version of Zenbership CMS. The script sends an HTTP request to the server and attempts to detect the application from the reply. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Country micro cms Membership authentication SQL injection

No description provided by source...

Stored Cross-Site Scripting Vulnerability in FreeCMS Business Edition Frontend Membership Letter Writer

FreeCMS Business Edition is a java open source CMS that provides a mobile app. FreeCMS commercial version of the front-end members to write letters to the location of a stored cross-site scripting vulnerability, the attacker can be sent to any member or administrator by sending malicious script t...

engender.org.uk XSS vulnerability

Vulnerable URL: http://www.engender.org.uk/content/search/?q=membership...

Ad-LDAP-Enum - Active Directory LDAP Enumerator

ad-ldap-enum is a Python script that was developed to discover users and their group memberships from Active Directory. In large Active Directory environments, tools such as NBTEnum were not performing fast enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

Membership Formula - order SQL Injection

Membership Formula - order SQL Injection Exploit Title: Membership Formula - Best Membership Site PHP Script - SQL Injection Google Dork: N/A Date: 31.03.2017 Vendor Homepage: http://www.zeescripts.com/ Software:...

Membership Formula SQL Injection

Exploit Title: Membership Formula - Best Membership Site PHP Script - SQL Injection Google Dork: N/A Date: 31.03.2017 Vendor Homepage: http://www.zeescripts.com/ Software: http://www.zeescripts.com/store/membership-formula-v1.0-best-membership-site-php-script.html Demo:...

Membership Formula - order Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Membership Formula - Best Membership Site PHP Script - SQL Injection Google Dork: N/A Date: 31.03.2017 Vendor Homepage: http://www.zeescripts.com/ Software:...

Membership Formula - 'order' SQL Injection

Exploit Title: Membership Formula - Best Membership Site PHP Script - SQL Injection Google Dork: N/A Date: 31.03.2017 Vendor Homepage: http://www.zeescripts.com/ Software: http://www.zeescripts.com/store/membership-formula-v1.0-best-membership-site-php-script.html Demo:...

Joomla! Component Simple Membership 3.3.3 - 'userId' Parameter SQL Injection

Joomla! Component Simple Membership 3.3.3 - the 'userId' Parameter SQL Injection Joomla! Component Simple Membership 3.3.3, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you tu...

Membership Site Script 1 SQL Injection

Title: Membership Site Script v1 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.turnkeycentral.com Vendor URL: http://www.turnkeycentral.com/scripts/membership-site-script/ Product: Membership Site Script v1 Google Dork: N/A Product & Service Introduction: "Membership Site Script" Do y...

Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download

Vulnerability title: Wordpress Plugin Membership Simplified 1.58 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Membership Simplified 1.58 Vulnerabilities exist in the url: /wp-content/plugins/membership-simplified-for-oap-members-only/download.php...

WordPress Membership Simplified 1.58 Arbitrary File Download

Title: Arbitrary file download vulnerability in Wordpress Plugin Membership Simplified v1.58 Author: Larry W. Cashdollar, @larry0 Date: 2017-03-13 CVE-ID:CVE-2017-1002008 Download Site: https://wordpress.org/plugins/membership-simplified-for-oap-members-only Vendor:...

Wordpress Membership Simplified v1.58 Plugin - Arbitrary File Download Exploit

Exploit for php platform in category web applications import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery:...

WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download

import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir...

WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download Vulnerability

Arbitrary file download vulnerability found in WordPress Plugin Membership Simplified version 1.58. Plugin does't check whether the user is logged in or not and if logged does it has file download privileges. Solution We were unable to find patched version of this plugin. Also, this plugin remove...