joomla com_Nice Ajax Poll 1.4.0 组件SQL注入漏洞

1.google 语法： inurl:"/index.php?option=comniceajaxpoll" 2.随便打开一个网站，利用sqlmap 进行注入. sqlmap.py -u "http://www.cevosop.com/index.php?option=comniceajaxpoll&getpliseid=" --current-user...

Modern Vulnerable Web App: Hackazon

Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective training and...

用友CRM系统 /ajax/ 三处任意文件上传

No description provided by source...

Joomla Nice Ajax Poll 1.4.0 SQL Injection Vulnerability

Joomla Nice Ajax Poll component version 1.4.0 suffers from a remote SQL injection vulnerability. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0...

Joomla Nice Ajax Poll 1.4.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

xpshop ajax.aspx ProductNos参数 SQL注入

No description provided by source...

netdoktor.de XSS vulnerability

Vulnerable URL: http://www.netdoktor.de/search/es-ajax/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12410 Google Pagerank| 6 VIP website status:| Yes...

sysPass 1.1.2.23 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-047 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.1.2.23 and below Tested Versions: 1.1.2.23 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor Notification:...

PHP Utility Belt - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP utility belt Remote Code Execution vulnerability Author : WICS Date : 8/12/2015 Software Link : https://github.com/mboynes/php-utility-belt Overview: PHP utility belt is a set of tools for PHP developers. Install in a...

WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress...

WordPress Plugin Users Ultra 1.5.50 - Blind SQL Injection

WordPress Plugin Users Ultra 1.5.50 - Blind SQL Injection Exploit Title: WordPress Users Ultra Plugin Blind SQL injection Discovery Date: 2015/10/19 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com...

WordPress Users Ultra 1.5.50 SQL Injection / Cross Site Scripting Vulnerabilities

WordPress Users Ultra plugin version 1.5.50 suffers from a remote blind SQL injection / Cross Site Scripting vulnerabilities. Exploit Title: WordPress Users Ultra Plugin Blind SQL injection Discovery Date: 2015/10/19 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact:...

WordPress Plugin Users Ultra 1.5.50 - Blind SQL Injection

Exploit Title: WordPress Users Ultra Plugin Blind SQL injection Discovery Date: 2015/10/19 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...

WordPress Users Ultra 1.5.50 SQL Injection

Exploit Title: WordPress Users Ultra Plugin Blind SQL injection Discovery Date: 2015/10/19 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link: https://wordpress.org/plugins/users-ultra/...

ok.ru: Обход защиты от csrf-ок в m.ok.ru

Здравствуйте! Нашел еще способ обхода защиты от csrf-ок через параметр st.rtu Тогда можно было обойти через dlgId и через ссылки на страницах Сейчас заметил что можно сделать ajax запрос с токеном X-XTKN через параметр st.rtu Его можно отправить через редактирование заметки, записи в группе, при...

WordPress Ajax Store Locator 1.2 - SQL Injection Vulnerability

No description provided by source...

jeugdlimburg.be XSS vulnerability

Vulnerable URL: http://jeugdlimburg.be/wp-admin/admin-ajax.php?action=search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=11f3c046f5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

CVE-2015-7808

The vBApiHook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments...

WP Fastest Cache <= 0.8.4.8 - Blind SQL Injection

According to the researcher, for this vulnerability to be present WP-Polls plugin also needs to be installed...

Wordpress Ajax Load More Plugin 2.8.1.1 Upload Shell Exploit

This Metasploit module exploits an arbitrary file upload in the WordPress Ajax Load More version 2.8.1.1. It allows you to upload arbitrary php files and get remote code execution. This Metasploit module has been tested successfully on WordPress Ajax Load More 2.8.0 with WordPress 4.1.3 on Ubuntu...