Webmatic 3.1.1 Blind SQL Injection

Advisory ID: HTB23096 Product: Webmatic Vendor: valarsoft.com Vulnerable Versions: 3.1.1 and probably prior Tested Version: 3.1.1 Vendor Notification: 13 June 2012 Public Disclosure: 4 July 2012 Vulnerability Type: Blind SQL Injection CVE Reference: CVE-2012-3350 CVSSv2 Base Score: 7.5...

Blind SQL Injection in Webmatic

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Webmatic, which can be exploited to perform Blind SQL Injection attacks. 1 Blind SQL Injection in Webmatic: CVE-2012-3350 1.1 Input passed via the "Referer:" field of the HTTP header to index.php is not properly sanitised...

Webmatic SQL Injection

Webmatic SQL Injection HTTPREFERER Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Sql injection

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

The provided documents confirm a SQL injection vulnerability in Webmatic’s index.php exploitable via the p parameter, enabling remote execution of arbitrary SQL commands. Affected software/component: Webmatic (index.php). Root cause: improper handling of the p parameter leading to SQL injection. ...

CVE-2010-4808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

Webmatic SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Webmatic...

Webmatic (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Webmatic index.php SQL Injection Vulnerability ================================================ Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : November, 13-2010 Location : Jakarta,...

Webmatic - index.php SQL Injection

Webmatic - index.php SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Webmatic - 'index.php' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Webmatic...

XSRF (CSRF) in Webmatic

Vulnerability ID: HTB22570 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

XSS vulnerability in Webmatic

Vulnerability ID: HTB22568 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: Stored XSS Cross Site...

XSS vulnerability in Webmatic

Vulnerability ID: HTB22569 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic1.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: Stored XSS Cross Site...

Webmatic 3.0.5 Cross Site Request Forgery / Cross Site Scripting

==================================== Vulnerability ID: HTB22568 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010...

Valarsoft WebMatic 3.0.5 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42767/info Valarsoft WebMatic is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTM...

Valarsoft WebMatic 3.0.5 - Multiple HTML Injection Vulnerabilities

Valarsoft WebMatic 3.0.5 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42767/info Valarsoft WebMatic is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically...

Cross-site Request Forgery (CSRF) Vulnerabilities in Webmatic

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmatic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Webmatic 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities

This host is running Valarsoft Webmatic and is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvsoftwebmaticxssnsqlinjvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities...