CVE-2017-1002020

Vulnerability in wordpress plugin surveys v1.01.8, The code in surveyform.php does not sanitize the action variable before placing it inside of an SQL query...

Design/Logic Flaw

Vulnerability in wordpress plugin surveys v1.01.8, The code in individualresponses.php does not sanitize the surveyid variable before placing it inside of an SQL query...

CVE-2017-1002020

Vulnerability in wordpress plugin surveys v1.01.8, The code in surveyform.php does not sanitize the action variable before placing it inside of an SQL query...

CVE-2017-1002020

Vulnerability in wordpress plugin surveys v1.01.8, The code in surveyform.php does not sanitize the action variable before placing it inside of an SQL query...

CVE-2017-1002022

The CVE-2017-1002022 entry concerns the WordPress Surveys plugin (v1.01.8). A SQL injection flaw exists in questions.php where the survey variable is not sanitized before being placed into an SQL query. This vulnerability can allow arbitrary SQL execution; some sources describe it as authenticate...

CVE-2017-1002021

Vulnerability in wordpress plugin surveys v1.01.8, The code in individualresponses.php does not sanitize the surveyid variable before placing it inside of an SQL query...

CVE-2017-1002020

Vulnerability: WordPress Surveys plugin version 1.01.8 contains a SQL injection in survey_form.php where the action variable is not sanitized before being placed into an SQL query. Impact stated in sources implies arbitrary SQL execution against the database. Affected component: the surveys plugi...

CVE-2017-1002021

CVE-2017-1002021 affects WordPress plugin Surveys (version 1.01.8). The issue is that in individual_responses.php the survey_id is not sanitized before being used in an SQL query, enabling SQL injection. Connected sources corroborate an SQL injection vulnerability; WPVulnDB describes it as an aut...

CVE-2017-1002022

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query...

Surveys 1.01.8 - Authenticated SQL Injection

The surveys WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

Maian Survey 1.1 - survey SQL Injection

Maian Survey 1.1 - survey SQL Injection Exploit Title: Maian Survey v1.1 - SQL Injection Google Dork: N/A Date: 04.04.2017 Vendor Homepage: http://www.maiansoftware.com/ Software: http://www.maiansurvey.com/?dl=yes Demo: http://www.maiansoftware.com/demos/survey/ Version: 1.1 Tested on: Win7 x64,...

Joomla Community Surveys 4.3 SQL Injection

Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/surveys/community-surveys...

Joomla Community Surveys 4.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla! Component Community Surveys 4.3 - SQL Injection

Joomla! Component Community Surveys 4.3 - SQL Injection Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla! Component Community Surveys 4.3 - SQL Injection

Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/surveys/community-surveys...

[SECURITY] Fedora 22 Update: drupal7-webform-4.7-1.fc22

Webform is the module for making surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review and has and...

Mail.ru: /surveys/2auth: DOM-based XSS

document.write''; в него попадаем, когда кука swalang=en для меня Firefox URL-encode-ит location, увы на IE должно прокатить при кейсе BlackFan-а когда другой сайт выдает location GET /surveys/2auth?a='"%20content="40"/%20alert123;!-- HTTP/1.1 Host: help.mail.ru User-Agent: Mozilla/5.0 Macintosh;...

Mail.ru: GET /surveys/2auth: XSS

GET...

Win Apple's iPhone 6 For Free – A New Facebook Scam

Apple's iPhone 6 FREE ? Of course not ! It’s only a hoax, but scammers have announced the just release iPhone 6 free. Another Facebook scam is circulating across the popular social networking website just days after Apple unveiled its upcoming iPhone 6 and iPhone 6 Plus, as scammers take advantag...

Joomla Component JQuarks4s 1.0.0 - Blind SQL Injection Vulnerability

No description provided by source. JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...