46 matches found
CVE-2008-0520: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...
Wordpress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit
No description provided by source. ? WordPress WassUp plugin v 1.4.3 Sql Injection Exploit Plugin Homepage-http://www.wpwp.org/ Found by:enterthedragon Tested successfully on v 1.4-1.4.3 lower versions are possibly vulnerable too just check the source and modify the query as needed Vuln code -In...
WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection
getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY maxtimestamp DESC"; Exploit $fromdate and $todate GET variabl...
Wordpress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================================== Wordpress Plugin WassUp 1.4.3 spy.php todate SQL Injection Exploit ===================================================================== getresults"SELECT id, wassupid,...
WordPress Plugin WassUp 1.4.3 - to_date SQL Injection
WordPress Plugin WassUp 1.4.3 - todate SQL Injection getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY...
