FS Indiamart Clone - 'keywords' SQL Injection

Exploit Title: FS Indiamart Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/indiamart-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...

iTech B2B Script 4.42 - SQL Injection

iTech B2B Script 4.42 - SQL Injection Exploit Title: Itech B2B Script 4.42 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : http://itechscripts.com/ Software Link: http://itechscripts.com/c/B2B/ Demo: http://b2b.itechscripts.com/ Version: 4.42 Category: Webapps Tested on:...

iTech B2B Script 4.42 - SQL Injection

Exploit Title: Itech B2B Script 4.42 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : http://itechscripts.com/ Software Link: http://itechscripts.com/c/B2B/ Demo: http://b2b.itechscripts.com/ Version: 4.42 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: Exploit Author: Ihsan...

Sql injection

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

Xxe

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1174

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1174

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

CVE-2017-1174

CVE-2017-1174 affects IBM Sterling B2B Integrator Standard Edition 5.2. The vulnerability is SQL injection that could allow a remote attacker to view, add, modify, or delete data in the back-end database. Affected product/version: IBM Sterling B2B Integrator Standard Edition 5.2. Root cause: SQL ...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

CVE-2017-1174

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

CVE-2017-1192

IBM Sterling B2B Integrator 5.2 is affected by CVE-2017-1192 (XML External Entity Injection) when processing XML data. A remote attacker could exfiltrate sensitive information or exhaust memory/resources. IBM’s bulletin specifies remediation: apply the 5.2 fix packs IT19755 or 5020603_2/5020602_4...

CVE-2017-1174: Improper Neutralization of Special Elements used in an SQL Command

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296...

CVE-2017-1192: Improper Restriction of XML External Entity Reference

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663...

PT-2017-12310

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 Description The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing highly sensitive information or consuming memory...

PT-2017-12215

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database...

Entrepreneur B2B Script SQL Injection

Exploit Title: Entrepreneur B2B Script - 'pid' Parameter SQL Injection Date: 2017-08-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://readymadeb2bscript.com/ Version: All Version Exploit : http://site.com/path/productview1.php?pid=-99999+SQL+Comm...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

Xxe

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...