CyberCentral Summit 2018 in Prague

Almost whole last week I spent in Prague at CyberCentral conference. It was a pretty unique experience for me. I was for the first time at the International conference as a speaker. And not only I presented my report there, but lead the round table on Vulnerability Management and participated in ...

restaurant-edem.com XSS vulnerability

Open Bug Bounty ID: OBB-567396 Description| Value ---|--- Affected Website:| restaurant-edem.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

restaurant-schaeferhof.fr XSS vulnerability

Open Bug Bounty ID: OBB-567286 Description| Value ---|--- Affected Website:| restaurant-schaeferhof.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alsalam-restaurant.com XSS vulnerability

Open Bug Bounty ID: OBB-566340 Description| Value ---|--- Affected Website:| alsalam-restaurant.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Japanese "Dude Food" Includes Squid

This seems to be a trend. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Joomla vRestaurant 1.9.4 SQL Injection

Title: Joomla! vRestaurant 1.9.4 - SQL injection Credit: Bilal KARDADOU Vendor: https://www.wdmtech.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/vrestaurant/ Product: 'Joomla! vRestaurant 1.9.4' Developer: WDMtech Extension type: Plugin Last updated...

Zomato: [www.zomato.com] Privilege Escalation - /php/restaurant_menus_handler.php

Introduction In the following ██████████ the endpoint /php/restaurantmenushandler.php was found. This endpoint is meant solely to be accessible for admins, however due to insufficient protections normal users can access this endpoint too. This results in any Zomato user being able to edit and...

Sql injection

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

CVE-2017-15993 : Zomato Clone Script is vulnerable to SQL Injection in the restaurant-menu.php resid parameter. The issue allows an attacker to inject SQL commands, potentially revealing or modifying database data. This vulnerability is documented across multiple sources (NVD/CVE records) with hi...

Zomato Clone Script SQL Injection Vulnerability

Zomato Clone Script is a clone script. A SQL injection vulnerability exists in the restaurant-menu.php resid parameter of Zomato Clone Script, which can be exploited by an attacker to access or modify database data...

restaurant-pfannenstiel.ch XSS vulnerability

Vulnerable URL: http://www.restaurant-pfannenstiel.ch/frmkontakt.cfm?Email=info%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

restaurantoneandonly.de XSS vulnerability

Vulnerable URL:...

Restaurant Site Script 1.4 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo:...

ICRestaurant software 1.4 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo:...

ICRestaurant software 1.4 - key SQL Injection

ICRestaurant software 1.4 - key SQL Injection Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo: http://icloudcenter.net/demos/icrestaurant/...

ICRestaurant software 1.4 - 'key' SQL Injection

Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo: http://icloudcenter.net/demos/icrestaurant/ Version: 1.4 Category: Webapps Tested on:...

Restaurant Website Script 1.0 SQL Injection

Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...

Restaurant Website Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0...