5797 matches found
WordPress Paid Downloads 2.01 SQL Injection
Exploit Title: WordPress Paid Downloads plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $downloadkey = $GET"downloadkey"; $sql = "SELECT FROM ".$wpdb-prefix."pddownloadlinks WHERE downloadkey = '".$downloadkey."'"; $linkdetails =...
SA-CONTRIB-2011-040 Author Pane access bypass
The Author Pane module provides information about users on a site. This module has integration with several other modules including the user locations of the Location module. If you enabled display of user locations the Author Pane module may have shown user locations to site visitors who did not...
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...
WordPress KNR Author List Widget Plugin <= 2.0.0 - SQL Injection
KNR Author List Widget plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress KNR Author List Widget 2.0.0 SQL Injection
Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET knrauthororder = $position WHERE ID = $item";...
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection
Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET knrauthororder = $position WHERE ID = $item";...
WordPress KNR Author List Widget plugin <= 2.0.0 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...
WordPress Plugin Couponer 1.2 - SQL Injection
Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...
WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Photoracer plugin = 1.0 SQL Injection Vulnerability Google Dork: inurl:"wp-content/plugins/photoracer/viewimg.php" Date: 2011-08-26 Author: evilsocket evilsocket at gmail dot com Software Link:...
yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)
No description provided by source. !/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windows XP SP3 CVE : N/A...
WordPress oQey Headers 0.3 SQL Injection
Exploit Title: WordPress oQey Headers plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ifisset$GET'imgheaderid'//order images foreach $GET'imgheaderid' as $position = $item $hupdate = sprintf"UPDATE $oqeyheader SET oqeyhorder = '%d'...
Free MP3 CD Ripper 1.1 Local Buffer Overflow
Exploit for windows platform in category local exploits Exploit Title : Free MP3 CD Ripper 1.1 Local Buffer Overflow Software : http://www.brothersoft.com/free-mp3-cd-ripper-84543.html Version : 1.1 Tested on : Windows xp sp3 en Date : 27/08/2011 Author : X-h4ck Website : http://www.pirate.al ,...
Buchanan Solutions SQL Injection
+------------------------------------------------------------------------------------------+ |------------------------ B-Solutions SQL Injection Vulnerability -----------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...
WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...
Logical Web Publisher SQL Injection
+------------------------------------------------------------------------------------------+ |------------------- Logical Web Publisher SQL Injection Vulnerability ------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...
F-Secure Multiple Products SEH Overwrite
Exploit Title: F-Secure Multiple Products ActiveX Remote SEH Overwrite VulnerabilityHeap Spray Discovered Date: 24/05/2011 Author: 41.w4r10r Version: Multiple Tested on : Windows XP SP2 Eng, IE 6,7,8 Affected Products : F-Secure Anti-Virus 2011 F-Secure Anti-Virus 2010 F-Secure Internet Security...
WordPress User IDs and User Names Disclosure
WordPress platforms use a parameter called author SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress";...
Wcs2u SQL Injection
Title : Web Solutions Wcs2u SQL Injection Vulnerability Vendor or Software Link: : http://www.wcs2u.com/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Engineered by WCS2U.COM" === POC === » http://website/index.php?id=SQL »...
WordPress Contus HD FLV Player 1.3 SQL Injection
Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item : mysqlquery"UPDATE $wpdb-prefix" . "hdflvmed2play SET sorder =...
D.R. Software Audio Converter 8.1 DEP Bypass Exploit
No description provided by source. !/usr/bin/perl +Exploit Title: D.R. Software Audio Converter 8.1 DEP Bypass Exploit +Date: 13\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/Audio-Converter/3000-21404-10045287.html +Found By: Sud0 from Corelan...