My Click Counter 1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: My Click Counter x Script Version: 1.0 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=15 x Author: AnarchyAngel AKA Adam...

Malware exploit: Herpes Net 3.0

Type: SQL Injection Author: bwall import random import pycurl import urllib import cStringIO import json def ui: try: return unicodei, errors='ignore' except: return i class HerpesNetPanel: def initself, gatewayurl: self.gatewayurl = gatewayurl @staticmethod def getfieldgateway, table, column, ro...

Podlove Podcast Publisher <= 2.3.15 - Multiple SQLi & XSS

The Podlove Podcast Publisher WordPress plugin was affected by a Multiple SQLi & XSS security vulnerability...

Exponent CMS <= 2.4.0 Information Disclosure and SQLi Vulnerabilities

Exponent CMS is prone to an SQL injection SQLi and an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion LFI & SQLi security vulnerability...

Alienvault OSSIMUSM 5.3.1 - SQL Injection

Alienvault OSSIMUSM 5.3.1 - SQL Injection Details ======= Product: Alienvault OSSIM/USM Vulnerability: SQL Injection Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8582 Vulnerable Versions: =5.3.1 Fixed Version: 5.3.2 Vulnerability Details ===================== A SQL injection vulnerability...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

CVE-2016-1000120

CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...

CVE-2016-1000118

XSS & SQLi in HugeIT slideshow v1.0.4...

CVE-2016-1000117

Consolidated details show CVE-2016-1000117 affects the Huge-IT Slideshow extension (Joomla!) v1.0.4. The vulnerability is described as cross-site scripting (XSS) and SQL injection (SQLi). CNVD-2016-06066 specifies the flaw resides in /views/slideshow/tmpl/default.php and is exploitable via the 'i...

CVE-2016-1000118

XSS & SQLi in HugeIT slideshow v1.0.4...

CVE-2016-1000118

CVE-2016-1000118 affects HugeIT Slideshow v1.0.4 ( Joomla! extension). Connected records confirm a SQL injection vulnerability in /models/slideshow.php and NVD also lists XSS in the same product/version. Impact per sources includes possible arbitrary SQL execution and cross‑site scripting; exploi...

OpenCimetiere 3.0.0-a5 - Blind SQL Injection

OpenCimetiere 3.0.0-a5 - Blind SQL Injection Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5...

CVE-2016-1000217

Zotpress plugin for WordPress SQLi in zpgetaccount...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000217

CVE-2016-1000217 corresponds to a SQL injection in the Zotpress WordPress plugin, specifically in the zp_get_account() function. Affected product: WordPress Zotpress plugin (pre-6.1.3). The vulnerability enables remote attackers to submit crafted SQL queries via the affected API, with network-rem...

CVE-2016-1000113

CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...

Joomla com_aicontactsafe Arbitrary File Upload / SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link :...