Sql injection

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

CVE-2014-9345

CVE-2014-9345 affects Guruperl.net Advertise With Pleasure! Professional (AWP PRO) up to version 6.6. The vulnerability is an SQL injection in the list_zone action of cgi/client.cgi, exploitable via the group_id parameter. The root cause is improper handling of input in a SQL query, allowing remo...

Advertise With Pleasure! (AWP) 6.6 - SQL Injection Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Advertise With Pleasure! AWP = 6.6 - SQL Injection vulnerability Date: 12/02/2014 Author: Robert Cooper robertcatareyousecure.net Software Link: http://www.guruperl.net/products/awppro/ Tested on: Linux/Windows 7 Vulnerable...

Advertise With Pleasure! (AWP) 6.6 SQL Injection

Exploit Title: Advertise With Pleasure! AWP = 6.6 - SQL Injection vulnerability Date: 12/02/2014 Author: Robert Cooper robertcatareyousecure.net Software Link: http://www.guruperl.net/products/awppro/ Tested on: Linux/Windows 7 Vulnerable Parameter: groupid= PoC:...

Advertise With Pleasure! (AWP) 6.6 - SQL Injection

Exploit Title: Advertise With Pleasure! AWP = 6.6 - SQL Injection vulnerability Date: 12/02/2014 Author: Robert Cooper robertcatareyousecure.net Software Link: http://www.guruperl.net/products/awppro/ Tested on: Linux/Windows 7 Vulnerable Parameter: groupid= PoC:...