4275 matches found
Cart Engine 3.0 XSS / Open Redirect / SQL Injection
=== Details === Quantum Leap Advisory: http://www.quantumleap.it/cart-engine-3-0-multiple-vulnerabilities-sql-injection-reflected-xss-open-redirect/ Affected Product: Cart Engine Version: 3.0 === Executive Summary === SQL Injection: Using a specially crafted HTTP request, it is possible to exploi...
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using ...
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Square: Blind SQL injection in www.bookfresh.com
The resource at /reservations doesn't properly sanitise the "client" variable before putting it into a MySQL statement. This results in a Blind SQL Injection vulnerability. We can demonstrate the vulnerability by making the SQL server wait for a while before responding. PoC wait a while:...
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...
SendIt <= 1.5.9 - Blind SQL Injection
The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...
NextGEN Smooth Gallery - Blind SQL Injection
The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Disqus Blog Comments <= 2.77 - Blind SQL Injection
The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability...
UPM-POLLS 1.0.4 - BLIND SQL injection
The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...
WP-Predict 1.0 - Blind SQL Injection
The wp-predict WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Paid Business Listings - Blind SQL Injection
Form Submission pbllistingpkgid Parameter...
Related Sites 2.1 - Blind SQL Injection
The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Yahoo!: caesary.yahoo.net Blind Sql Injection
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
XDCMS企业管理系统SQL #3
简要描述： rt 详细说明： public function editsave $this-memberinfo; $userid=intvalCookie::getcookie'memberuserid'; $fields=$POST'fields'; //������ $fieldsql=''; foreach$fields as $k=$v $fvalue=$v; ifisarray$v $fvalue=implode',',$v; $fieldsql.=",$k='".safehtml$fvalue."'"; $fieldsql=substr$fieldsql,1;...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...
WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection
No description provided by source. Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...
Bedder CMS Blind SQL Injection Vulnerability
No description provided by source. +Exploit Title: Bedder CMS Blind SQL Injection Vulnerability +Author : ^Xecuti0n3r + Date : 15.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:Design by Bedder + Category : Web Apps Blind SQli Choose any site that comes up when you enter...