CMS AutoWeb 3.0 SQL Injection Vulnerability

CMS AutoWeb version 3.0 suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. + Sql Injection on CMS AutoWeb v3.0 + Date: 24/09/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.multdivision.com.br...

Shutter vulnerable to SQL injection

Overview Shutter provided by tenfourzero is a web package allowing users to share their photos. lib/admin.php in Shutter contains a SQL injection vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2014-5194

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the wordupperbound parameter...

CVE-2014-5192

SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter parameter...

Sql injection

SQL injection vulnerability in the ENL Newsletter enl-newsletter plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php...

CVE-2014-4846

Cross-site scripting XSS vulnerability in the Meta Slider ml-slider plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php...

EUnet CMS Login Bypass / SQL Injection

Title : EUnet CMS Login Bypass Vulnerability Vendor : http://eunet.gr/ Dork : intext:"CMS by EUnet" Tested On Windows 8 , With Browser FireFox 30.0 Wtih This Vulnerability You Can Bypass Admin Page Admin Page : TARGET/adm/login.php | For English Lang :...

CMS ContWEB SQL Injection

Sql Injection on CMS ContWEB - ATI + Date: 02/07/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ati.pi.gov.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: album.php + Dork : inurl:album.php?id= +...

UranyumSoft Ýlan Servisi Database Disclosure Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu...

BPGames 1.0 - Blind SQL Injection

No description provided by source. x===================================================================x | AntiSecuritydotorg | x===================================================================x | Title : BPGames 1.0 blind SQL Injection Exploit | | Software : BPGames | | Vendor :...

Mambo Colophon Component <= 1.2 - Remote Inclusion Vulnerability

No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...

CubeCart <= 3.0.4 - SQL Injection Vulnerability

No description provided by source. /////////////////? Dr.NeT @ Abdullah hacker team////////////// /// ///Title : CubeCart 3.0.4 = SQL injection Vulnerabilities /// ///Script : CubeCart 3.0.4 /// ///Language : Php /// ///Download : http://www.cubecart.com/ /// ///Date : 2010/12/23 /// ///Version :...

Wordpress WP-SendSMS Plugin 1.0 - Multiple Vulnerabilities

No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...

ASPMass Shopping Cart - Vulnerability File Upload CSRF

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass...

osCommerce 2.2 admin/manufacturers.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...

osCommerce 2.2 admin/products_attributes.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...

visinia 1.3 - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : SimpleBlog 2.3 by 8pixel.net ---------------------------------------------------------------------------...

Shop Creator 4.0 - SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

EquiPCS SQL Injection vulnerability exploit

No description provided by source. ============================================================ Title: EquiPCS=SQL onjection vulnerability Date:9/6/11 Author: Sideswipe Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in Category: Web apps Dork: intext:Powered by EquiPCS Tested On : Xp...