Exponent CMS SQL Injection

SQL Injection vulnerability in Exponent CMS expCommentController.php contentid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Exponent CMS 2.3.9 LFI

Local file include vulnerability in Exponent CMS page parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager File Upload

File upload vulnerability in Trend Micro Control Manager importFile.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager File Disclosure

File disclosure vulnerability in Trend Micro Control Manager download.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Trend Micro InterScan Web Security Virtual Appliance ConfigBackup File Upload

File upload vulnerability in Trend Micro InterScan Web Security Virtual Appliance ConfigBackup servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro SafeSync for Enterprise 3.2 check_nfs_server_status RCE

Remote command execution vulnerability in Trend Micro SafeSync for Enterprise checknfsserverstatus Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ICAutosales 1.2 SQL Injection

Title: ICAutosales v1.2 - SQL Injection Credit: Bilal KARDADOU Vendor: http://www.icloudcenter.com Vendor URL: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Product: AUTO DEALER CAR SALES PHP SCRIPT. Google Dork: N/A Product & Service Introduction: ICAutosales is a powerful, highly...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

Multi Outlets POS 3.1 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

Multi Outlets POS 3.1 SQL Injection

Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo: http://pos.prosoft-apps.com/pos/ Version: N/A Tested...

Multi Outlets POS 3.1 - id SQL Injection

Multi Outlets POS 3.1 - id SQL Injection Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

autofinishcarsales.co.uk XSS vulnerability

Vulnerable URL: http://www.autofinishcarsales.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Joomla Component com_eventbooking SQL Injection

SQL Injection vulnerability in Joomla Component comeventbooking date parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_blog_calendar SQL Injection

SQL Injection vulnerability in Joomla Component comblogcalendar modid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

SonicWALL Global Management System ImagePreviewServlet SQL Injection

SQL Injection vulnerability in SonicWALL Global Management System ImagePreviewServlet logoID parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_dtregister SQL Injection

SQL Injection vulnerability in Joomla Component comdtregister cat parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

eFront libraries/includes/social.php SQL Injection

SQL Injection vulnerability in eFront libraries/includes/social.php id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress ReFlex Gallery 3.1.3 File Upload

File upload in WordPress ReFlex Gallery plugin php.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Product Catalog 8 SQL Injection

SQL Injection vulnerability in WordPress Product Catalog 8 plugin selectedCategory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 4.2.1.3 RCE

Remote command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...