ZM Gallery 1.0 – Authenticated Blind SQL Injection

The plugin is still affected and has been closed. Type user access: admin user. $GET‘order’ is escaped wrong. Attack with Blind Injection PoC python sqlmap.py -u "http://www.example.com/wp-admin/admin.php?page=zmgallery=name=desc" --dbs --cookie="cookie of admin user" --level=5 --dbms=mysql...

Wordpress Plugin Olimometer 2.56 - SQL Injection

Vulnerability parameters: olimometerid= Using sqlmap Parameter: olimometerid GET Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: olimometerid=1 AND 6227=6227 Type: AND/OR time-based blind Title: MySQL = 5.0.12 AND time-based blind Payload: olimometerid=1...

LocalTapiola: SQL Injection on /webApp/omatalousuk (viestinta.lahitapiola.fi)

I would like to report a SQL Injection vulnerability on viestinta.lahitapiola.fi Vulnerable Request: GET /webApp/omatalousuk?email=aaaaa HTTP/1.1 Host: viestinta.lahitapiola.fi User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.12; rv:49.0 Gecko/20100101 Firefox/49.0 Accept: text/html, /; q=0.0...

Classifieds Rental Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection in Classifieds Rental Script Date: 19 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: www.i-netsolution.com...

Classifieds Rental Script SQL Injection

Exploit Title: SQL Injection in Classifieds Rental Script Date: 19 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: www.i-netsolution.com ---------------------------------------------------------------------------------------------------------------------- Proof of Concep...

Classifieds Rental Script - SQL Injection

Exploit Title: SQL Injection in Classifieds Rental Script Date: 19 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: www.i-netsolution.com ---------------------------------------------------------------------------------------------------------------------- Proof of Concep...

Classifieds Rental Script - SQL Injection

Classifieds Rental Script - SQL Injection Exploit Title: SQL Injection in Classifieds Rental Script Date: 19 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: www.i-netsolution.com...

Advance MLM Script - SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : Advance MLM Script SQL Vulnerabilities | Software : Advance MLM Script | Vendor :...

Entrepreneur Job Portal Script 2.06 - SQL Injection

Entrepreneur Job Portal Script 2.06 - SQL Injection x========================================================================================================================================x | Title : Entrepreneur Job Portal Script SQL Injection | Software : Entrepreneur Job Portal Script | Versi...

B2B Portal Script - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

MLM Unilevel Plan Script 1.0.2 SQL Injection

Application Name : MLM Unilevel Plan Script v1.0.2 Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date : 2016-10-06 Tested on : Windows 10 / Mozilla...

B2B Portal Script - Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

B2B Portal Script Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

Joomla com_ jomres SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla com jomres SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : index.php?option=com jomres "propertyuid" Software link : https://www.jomres.net/files/jomresjoomlacomponentinstaller.zip Vendor Homepage :...

Joomla com_videoflow SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comvideoflow SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comvideoflow Vendor Homepage : http://www.fidsoft.com version : 1.1.3 - 1.1.5 Tested on: BACK BOX skype:xbadgirl21 Date:...

Matrimonial Website Script 1.0.2 SQL Injection

Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date :...

Matrimonial Website Script 1.0.2 - SQL Injection

Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://www.i-netsolution.com/ Vulnerable Type : SQL Injection Date :...

Matrimonial Website Script 1.0.2 - SQL Injection

Matrimonial Website Script 1.0.2 - SQL Injection Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Matrimonial Website Script 1.0.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Application Name : Matrimonial Website Script v1.0.2 Google Dork : inurl:viewfullprofile1.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...