7 matches found
CVE-2020-15468
Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...
CVE-2020-15468
Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...
Sql injection
Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...
CVE-2020-15468
CVE-2020-15468 affects Persian VIP Download Script 1.0 and enables SQL Injection through the cart_edit.php active parameter. Public records (NVD) assign CVSS‑3.1 base score 9.8 (NETWORK, LOW attack complexity, no privileges required, UINONE, scope UNCHANGED; CONFIDENTIALITY, INTEGRITY, AVAILABILI...
CVE-2020-15468: Improper Neutralization of Special Elements used in an SQL Command
Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...
Persian VIP Download Script 1.0 SQL Injection
Exploit Title: Persian VIP Download Script 1.0 - 'active' SQL Injection Data: 2020-03-09 Exploit Author: S3FFR Vendor HomagePage: http://download.freescript.ir/scripts/Persian-VIP-DownloadFreeScript.ir.zip Version: = 1.0 Final Version Tested on: Windows,Linux Google Dork: N/A...
Persian VIP Download Script 1.0 - (active) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Persian VIP Download Script 1.0 - 'active' SQL Injection Exploit Author: S3FFR Vendor HomagePage: http://download.freescript.ir/scripts/Persian-VIP-DownloadFreeScript.ir.zip Version: = 1.0 Final Version Tested on: Windows,Linux...