CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

PT-2016-7717

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.4.1 Description A Blind SQL Injection issue can lead to site database information disclosure and denial of service. The issue is related to the rerank array parameter. Recommendations For versions prior to 2.4....

Exponent CMS 2.4.0 Blind SQL Injection

Document Title: =============== Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 References Source: ==================== https://exponentcms.lighthouseapp.com/projects/61783/tickets/1394-blind-sql-injection-vulnerability-in-exponent-cms-240-4...

BBQSQL - A Blind SQL Injection Exploitation Tool

Blind SQL injection can be a pain to exploit. When the available tools work they work well, but when they don't you have to write something custom. This is time-consuming and tedious. BBQSQL can help you address those issues. BBQSQL is a blind SQL injection framework written in Python. It is...

OpenCimetiere v3.0.0-a5 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5...

OpenCimetiere 3.0.0-a5 - Blind SQL Injection

OpenCimetiere 3.0.0-a5 - Blind SQL Injection Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5...

B2B Portal Script - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

CVE-2016-1000000

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...

CVE-2015-1000003

Blind SQL Injection in filedownload v1.4 wordpress plugin...

CVE-2015-1000011

Blind SQL Injection in wordpress plugin dukapress v2.5.9...

CVE-2015-1000003

Blind SQL Injection in filedownload v1.4 wordpress plugin...

CVE-2015-1000003

CVE-2015-1000003 describes a Blind SQL Injection in the WordPress plugin filedownload v1.4 . Multiple connected sources confirm that the vulnerability exists in this plugin version and is of the SQL injection type, impacting WordPress environments hosting this plugin. The NVD entry provides a hig...

CVE-2015-1000011

CVE-2015-1000011 affects WordPress via the DukaPress plugin up to version 2.5.9. The root cause is an unsafely handled user input in dukapress/download.php where $_GET['id'] is not sanitized before being passed to a database query, enabling a blind SQL injection. This allows unauthenticated, remo...

PT-2016-3571

Name of the Vulnerable Software and Affected Versions filedownload version 1.4 Description The issue is related to a Blind SQL Injection in the filedownload WordPress plugin. Recommendations For version 1.4, update to a newer version that contains a fix for this issue, if available. At the moment...

PHP Classifieds Rental Script Blind SQL Injection

x========================================================================================================================================x | Title : PHP Classifieds Rental Script Blind SQL Vulnerabilities | Software : PHP Classifieds Rental Script | Vendor : http://www.i-netsolution.com/ | Demo :...

CVE-2015-1000003: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL Injection in filedownload v1.4 wordpress plugin...

PT-2016-3579

Name of the Vulnerable Software and Affected Versions Dukapress version 2.5.9 Description The issue is related to a Blind SQL Injection in the Dukapress wordpress plugin. Recommendations For version 2.5.9, update to a newer version that contains a fix for this issue, if available. As a temporary...

B2B Portal Script - Blind SQL Injection

B2B Portal Script - Blind SQL Injection x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor :...

PT-2016-4489 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 16.4.1 Description: The issue is related to a Blind SQL Injection in the sUniqueID parameter of the WrFreeFormText.asp page. This allows for potential unauthorized access to database information. Recommendations:...

CVE-2016-1000000: Improper Neutralization of Special Elements used in an SQL Command

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection...