841 matches found
CVE-2017-9418
CVE-2017-9418 is a SQL injection vulnerability in the WordPress WP-Testimonials plugin version 3.4.1. An authenticated user can exploit the testid parameter in wp-admin/admin.php to execute arbitrary SQL commands. Public PoCs and exploits demonstrate union-based payloads and version disclosure, i...
WordPress WP-Testimonials SQL Injection
Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...
WordPress WP-Testimonials plugin <=3.4.1 - SQL Injection vulnerability
WordPress WP-Testimonials plugin is prone to SQL injection vulnerability. The vulnerability allows an authenticated user to execute arbitrary SQL commands via the "testid" parameter to wp-admin/admin.php Solution WordPress WP-Testimonials plugin removed from WordPress plugin directory. We suggest...
WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection
Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...
WP-Testimonials - Authenticated SQL Injection
Researcher tested version 3.4.1. Plugin removed from WordPress directory...
MLM Binary Plan Script 2.0.5 - SQL Injection
MLM Binary Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Binary Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-binary-plan-script/ Demo: http://74.124.215.220/binamlm/...
WordPress Easy Testimonials 1.36.1 Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress Plugin ------------------------------------------------------------------------ Bente Schopman, July 2016...
WordPress Easy Testimonials Plugin <= 1.36.1 - Stored Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Easy Testimonials <= 1.36.1 - Authenticated Stored Cross-Site Scripting (XSS)
The Easy Testimonials WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
Testimonials 1.0 Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Souk Naamane 0 1 + Support e-mail :...
guidedcare.org XSS vulnerability
Vulnerable URL: http://www.guidedcare.org/testimonials.asp?video=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13068891 Google...
HMS Testimonials 2.0.10 - CSRF
The HMS Testimonials WordPress plugin was affected by a CSRF security vulnerability...
HMS Testimonials 2.0.10 - XSS
The HMS Testimonials WordPress plugin was affected by a XSS security vulnerability...
dMx READY (25 Products) Remote Database Disclosure Vulnerability
No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...
osCommerce Addon Customer Testimonials 3.1 - SQL Injection Vulnerability
No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:customertestimonials.php Exploit:...
Joomla NijnaMonials Component (com_ninjamonials) Blind SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comninjamonials BSqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://ninjaforge.com/ Author :...
Wordpress HMS Testimonials Plugin 2.0.10 - Multiple Vulnerabilities
No description provided by source. Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/...
WordPress Collision Testimonials plugin <= 3.0 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Collision Testimonials plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/collision-testimonials.zip Version: 3.0...
CVE-2013-4240
Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...