5455 matches found
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Square: Blind SQL injection in www.bookfresh.com
The resource at /reservations doesn't properly sanitise the "client" variable before putting it into a MySQL statement. This results in a Blind SQL Injection vulnerability. We can demonstrate the vulnerability by making the SQL server wait for a while before responding. PoC wait a while:...
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...
SendIt <= 1.5.9 - Blind SQL Injection
The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...
NextGEN Smooth Gallery - Blind SQL Injection
The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...
UPM-POLLS 1.0.4 - BLIND SQL injection
The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...
Disqus Blog Comments <= 2.77 - Blind SQL Injection
The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Paid Business Listings - Blind SQL Injection
Form Submission pbllistingpkgid Parameter...
WP-Predict 1.0 - Blind SQL Injection
The wp-predict WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Related Sites 2.1 - Blind SQL Injection
The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Yahoo!: caesary.yahoo.net Blind Sql Injection
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
XDCMS企业管理系统SQL #3
简要描述： rt 详细说明： public function editsave $this-memberinfo; $userid=intvalCookie::getcookie'memberuserid'; $fields=$POST'fields'; //������ $fieldsql=''; foreach$fields as $k=$v $fvalue=$v; ifisarray$v $fvalue=implode',',$v; $fieldsql.=",$k='".safehtml$fvalue."'"; $fieldsql=substr$fieldsql,1;...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
phpfreeBB 1.0 - Remote BLIND SQL Injection Vulnerability
No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || phpfreeBB 1.0 Remote BLIND SQL Injection Vulnerability Discovered By : Moudi Contact : [email protected]...
Gantry Framework 3.0.10 (Joomla) Blind SQL Injection Exploit
No description provided by source. !/bin/bash Exploit Title: Gantry Framework 3.0.10 Joomla Blind SQL Injection Exploit Date: 4 September 2010 Author: jdc Software Link: http://www.gantry-framework.org Version: 3.0.10 Patched: 3.0.11 if $1 == then echo $0 usage: $0 url debug echo exit 1 fi clear...
Webmatic 3.1.1 - Blind SQL Injection
No description provided by source. Advisory ID: HTB23096 Product: Webmatic Vendor: valarsoft.com Vulnerable Versions: 3.1.1 and probably prior Tested Version: 3.1.1 Vendor Notification: 13 June 2012 Public Disclosure: 4 July 2012 Vulnerability Type: Blind SQL Injection CVE Reference: CVE-2012-335...
Active Web Mail 4 - Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home:...
File Store PRO 3.2 - Multiple Blind SQL Injection Vulnerabilities
No description provided by source. | File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GETfolder && $GETfolder!= $folder=$GETfolder; else exitBad Request; ifisset$GETid && $GETid!= $id=$GETid; el...