Alienvault OSSIMUSM 5.3.1 - SQL Injection

Alienvault OSSIMUSM 5.3.1 - SQL Injection Details ======= Product: Alienvault OSSIM/USM Vulnerability: SQL Injection Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8582 Vulnerable Versions: =5.3.1 Fixed Version: 5.3.2 Vulnerability Details ===================== A SQL injection vulnerability...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

CVE-2016-1000120

CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...

CVE-2016-1000122: Improper Neutralization of Special Elements used in an SQL Command

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121: Improper Neutralization of Input During Web Page Generation

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000120: Improper Neutralization of Special Elements used in an SQL Command

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000118

XSS & SQLi in HugeIT slideshow v1.0.4...

CVE-2016-1000118

XSS & SQLi in HugeIT slideshow v1.0.4...

CVE-2016-1000117

Consolidated details show CVE-2016-1000117 affects the Huge-IT Slideshow extension (Joomla!) v1.0.4. The vulnerability is described as cross-site scripting (XSS) and SQL injection (SQLi). CNVD-2016-06066 specifies the flaw resides in /views/slideshow/tmpl/default.php and is exploitable via the 'i...

CVE-2016-1000118

CVE-2016-1000118 affects HugeIT Slideshow v1.0.4 ( Joomla! extension). Connected records confirm a SQL injection vulnerability in /models/slideshow.php and NVD also lists XSS in the same product/version. Impact per sources includes possible arbitrary SQL execution and cross‑site scripting; exploi...

CVE-2016-1000119: Improper Neutralization of Input During Web Page Generation

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

OpenCimetiere 3.0.0-a5 - Blind SQL Injection

OpenCimetiere 3.0.0-a5 - Blind SQL Injection Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5...

CVE-2016-1000217

Zotpress plugin for WordPress SQLi in zpgetaccount...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000217

CVE-2016-1000217 corresponds to a SQL injection in the Zotpress WordPress plugin, specifically in the zp_get_account() function. Affected product: WordPress Zotpress plugin (pre-6.1.3). The vulnerability enables remote attackers to submit crafted SQL queries via the affected API, with network-rem...

CVE-2016-1000113

CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...

CVE-2015-1000011: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL Injection in wordpress plugin dukapress v2.5.9...

Joomla com_aicontactsafe Arbitrary File Upload / SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link :...