CVE-2017-1002019

The CVE tracks a vulnerability in the WordPress plugin EventR (v1.02.2): the edit.php and event_form.php code do not sanitize input, enabling blind SQL injection via the event parameter. Root cause is inadequate input sanitization; this can allow an attacker to execute arbitrary SQL commands rela...

PT-2017-11004

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the selectMulGallery parameter in the image-gallery-with-slideshow/admin setting.p...

CVE-2017-1002018: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

PT-2017-10999

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability in the Membership Simplified plugin for WordPress. Specifically, the code in the updateDB.php file is vulnerable because it fails to sanitize...

PT-2017-11003

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the gallery name parameter in the admin setting.php file. Recommendations For version...

CVE-2017-1002014: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002010: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

PT-2017-10998

Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability. It occurs because the code in the updateDB.php file does not properly sanitize user input via the recordId variable in the delete function...

PT-2017-11007

Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue concerns a lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter. Recommendations For version 1.02.2, updat...

CVE-2017-1002009: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002019: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

PT-2017-11002

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection vulnerability. It can be exploited via the imgid parameter in the "image-gallery-with-slideshow/admin setting.php" endpoint. Recommendations F...

AirStar Airbnb Clone Script 1.0 SQL Injection

Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/airstar-airbnb-clone/ Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...

iTech StockPhoto Script 2.02 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/stockphoto-script Version: 2.02 Tested on: Kali Linux 2.0 |...

EduStar Udemy Clone Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: EduStar Udemy Clone Script v1.0 - SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/edustar-udemy-clone/ Version: 1.0 Tested on: Kali Linux 2.0 | Mac O...

AirStar Airbnb Clone Script 1.0 - SQL Injection

AirStar Airbnb Clone Script 1.0 - SQL Injection Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/airstar-airbnb-clone/ Version: 1.0 Tested on: Kali Linu...

JobStar Monster Clone Script 1.0 - SQL Injection

JobStar Monster Clone Script 1.0 - SQL Injection Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/jobstar-monster-clone/ Version: 1.0 Tested on: Kali...

iTech StockPhoto Script 2.02 - SQL Injection

Exploit Title: iTech StockPhoto Script v2.02 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/stockphoto-script Version: 2.02 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contact:...

EduStar Udemy Clone Script 1.0 - SQL Injection

Exploit Title: EduStar Udemy Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/edustar-udemy-clone/ Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...

CVE-2017-12227

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...