Chyrp 2.1.1 - ajax.php HTML Injection

Chyrp 2.1.1 - ajax.php HTML Injection source: https://www.securityfocus.com/bid/52115/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser,...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

Sql injection

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0069

CVE-2012-0069 describes an SQL injection in Batavi’s web component. Affected: Batavi before 1.2.1, via ajax.php and the boxToReload parameter, enabling remote command execution. Exploit details are not provided in the supplied documents. Impact and remediation: the vulnerability allows arbitrary ...

CVE-2012-0069: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

PT-2012-2274

Name of the Vulnerable Software and Affected Versions Batavi versions prior to 1.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the boxToReload parameter in the "ajax.php" endpoint. Recommendations For versions prior to 1.2.1, update to...

CVE-2011-4803

Affected software: WordPress WPtouch plugin. Vulnerable component: wptouch/ajax.php; issue: SQL injection via the id parameter that allows remote execution of arbitrary SQL commands. Root cause: improper validation/escaping in the Ajax endpoint. Impact: potential data modification, query manipula...

PT-2011-5109

Name of the Vulnerable Software and Affected Versions WPTouch plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the /wptouch/ajax.php API endpoint. Recommendations For the affected version,...

CVE-2011-4803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

WordPress Plugin Glossary - SQL Injection

WordPress Plugin Glossary - SQL Injection Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...

WordPress WP Glossary Plugin SQL Injection

No description provided by source. Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...

WordPress WP Glossary SQL Injection

Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary, Wordpress Plugin, vulnerability is SQL...

WordPress Plugin wptouch - SQL Injection

WordPress Plugin wptouch - SQL Injection Exploit Title: WordPress wptouch plugin SQL Injection Vulnerability Date: 2011-27-10 Author: longrifle0x software: Wordpress Tools: SQLMAP --------------- POST data --------------- http://www.site.com/wp-content/plugins/wptouch/ajax.php Exploit: id=-1; id=...

WordPress Plugin Link Library 5.2.1 - SQL Injection

WordPress Plugin Link Library 5.2.1 - SQL Injection Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class...

WordPress Evarisk plugin <= 5.1.3.6 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Evarisk plugin = 5.1.3.6 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/evarisk.5.1.3.6.zip Version: 5.1.3.6 tested Note:...

PHPEIP CMS local include vulnerability-vulnerability warning-the black bar safety net

Test version: PHPEIP Content Management System CMS 2 0 1 0 Vulnerabilities page: member/ajax.php errorreporting0; if! defined‘PHPEIPAJAXHEADER’ chdir‘../’; require‘includes/applicationtop.php’; define‘PHPEIPAJAXHEADER’,"member/ajax.php’; requireonceDIRFSROOT.”xajax/xajax.inc.php”; $xajax = new...

WordPress Plugin Social Slider 5.6.5 - SQL Injection

Exploit Title: Social Slider...

WordPress Plugin GD Star Rating - 'votes' SQL Injection

source: https://www.securityfocus.com/bid/48166/info The GD Star Rating plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

HTB22862: Path disclosure in NextGEN Gallery wordpress plugin

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...