Lucene search
+L

5632 matches found

exploitpack
exploitpack
•added 2011/08/05 12:00 a.m.•11 views

WordPress Plugin Social Slider 5.6.5 - SQL Injection

WordPress Plugin Social Slider 5.6.5 - SQL Injection Exploit Title: Social Slider...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/08/05 12:00 a.m.•20 views

Social Slider 5.6.5 SQL Injection

Exploit Title: Social Slider...

0.2AI score
SaveExploits0
htbridge
htbridge
•added 2011/07/20 12:00 a.m.•50 views

SQL injection in Social Slider

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Social Slider, which can be exploited to perform SQL injection attacks. 1 SQL Injection Vulnerability in Social Slider Input passed via the "rA" POST parameter to /wp-content/plugins/social-slider-2/ajax.php is not properly...

7.5CVSS1AI score
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2011/07/20 12:00 a.m.•11 views

Social Slider < 7.4.2 - SQL Injection

The social-slider WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS3.3AI score0.0294EPSS
SaveExploits2References1Affected Software1
Packet Storm
Packet Storm
•added 2011/04/25 12:00 a.m.•33 views

html_edit CMS 3.1.9 Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SaveExploits0
Packet Storm
Packet Storm
•added 2011/02/26 12:00 a.m.•28 views

WordPress IGIT Posts Slider Widget 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress IGIT Posts Slider Widget 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://www.hackingethics.com/blog/wordpress-plugins/igit-posts-slider-widget/...

SaveExploits0
Patchstack
Patchstack
•added 2011/02/23 12:00 a.m.•25 views

WordPress IGIT Posts Slider Widget Plugin 1.0 - Cross-Site Scripting

IGIT Posts Slider Widget plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

2.3AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2011/02/23 12:00 a.m.•17 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting

WordPress Plugin IGIT Posts Slider Widget 1.0 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker m...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/02/23 12:00 a.m.•25 views

WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46589/info The IGIT Posts Slider Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

5.3AI score
SaveExploits0
Prion
Prion
•added 2008/05/23 3:33 p.m.•23 views

Sql injection

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS8.7AI score0.00907EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2008/05/23 3:33 p.m.•31 views

CVE-2008-2422

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS8AI score0.00907EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2008/05/23 3:00 p.m.•42 views

CVE-2008-2422

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

8AI score0.00907EPSS
SaveExploits2References2
CVE
CVE
•added 2008/05/23 3:00 p.m.•56 views

CVE-2008-2422

CVE-2008-2422 affects Web Slider 0.6, where an SQL injection in index.php via the slide parameter in a slides action allows remote attackers to execute arbitrary SQL commands. The CVSS base score is 7.5 (HIGH). Exploitation details are not provided in the documents. No remediation or patch inform...

7.5CVSS6.6AI score0.00907EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/23 12:00 a.m.•5 views

CVE-2008-2422: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS6.4AI score0.00907EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/05/20 12:00 a.m.•24 views

Web Slider 0.6 - slide SQL Injection

Web Slider 0.6 - slide SQL Injection source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/05/20 12:00 a.m.•40 views

Web Slider 0.6 - 'slide' SQL Injection

source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

7.5CVSS5.8AI score0.00907EPSS
SaveExploits2
Prion
Prion
•added 2008/05/18 2:20 p.m.•25 views

Authentication flaw

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

7.5CVSS7.7AI score0.02788EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2008/05/18 2:20 p.m.•22 views

CVE-2008-2298

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

7.5CVSS7.1AI score0.02788EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2008/05/18 2:00 p.m.•34 views

CVE-2008-2298

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

7.1AI score0.02788EPSS
SaveExploits1References3
CVE
CVE
•added 2008/05/18 2:00 p.m.•63 views

CVE-2008-2298

CVE-2008-2298 affects Web Slider 0.6. The vulnerability arises in Admin.php where a remote attacker can bypass authentication and gain elevated privileges by setting the admin cookie to 1. The issue is a cookie-based auth bypass, enabling unauthorized access to privileged functionality. The provi...

7.5CVSS7.2AI score0.02788EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder