6002 matches found
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection
ManageEngine Password Manager Pro ManageEngine IT360 - SQL Injection source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using ...
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Square: Blind SQL injection in www.bookfresh.com
The resource at /reservations doesn't properly sanitise the "client" variable before putting it into a MySQL statement. This results in a Blind SQL Injection vulnerability. We can demonstrate the vulnerability by making the SQL server wait for a while before responding. PoC wait a while:...
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...
SendIt <= 1.5.9 - Blind SQL Injection
The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...
NextGEN Smooth Gallery - Blind SQL Injection
The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...
UPM-POLLS 1.0.4 - BLIND SQL injection
The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...
Disqus Blog Comments <= 2.77 - Blind SQL Injection
The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Paid Business Listings - Blind SQL Injection
Form Submission pbllistingpkgid Parameter...
WP-Predict 1.0 - Blind SQL Injection
The wp-predict WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Related Sites 2.1 - Blind SQL Injection
The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability...
Yahoo!: caesary.yahoo.net Blind Sql Injection
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
CMS VIA-X SQL Injection
Blind Sql Injection on CMS VIA-X + Date: 23/07/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.viax.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: ultimasnoticias.php + Dork :...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
Microsoft MSN HBE - TB Blind SQL Injection Vulnerability
Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...
XDCMS企业管理系统SQL #3
简要描述： rt 详细说明： public function editsave $this-memberinfo; $userid=intvalCookie::getcookie'memberuserid'; $fields=$POST'fields'; //������ $fieldsql=''; foreach$fields as $k=$v $fvalue=$v; ifisarray$v $fvalue=implode',',$v; $fieldsql.=",$k='".safehtml$fvalue."'"; $fieldsql=substr$fieldsql,1;...
Date & Sex Vor und Rückwärts Auktions System <= 2 - Blind SQL Injection Exploit
No description provided by source. ---------------------------Information------------------------------------------------ +Name : Date & Sex Vor und Rückwärts Auktions System = v2 Blind SQL Injection Exploit +Autor : Easy Laster +Date : 27.03.2010 +Script : Date & Sex Vor und Rückwärts Auktions...
phux Download Manager Blind SQL Injection Vulnerability
No description provided by source. Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit ...
phpCheckZ 1.1.0 - Blind SQL Injection Vulnerability
No description provided by source. phpCheckZ 1.1.0 Blind SQL Injection Vulnerability Name phpCheckZ Vendor http://www.phpcheckz.com Versions Affected 1.1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-19 X. IND...
Parodia 6.8 employer-profile.asp SQL Injection
No description provided by source. Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL http://server/agencyprofile.asp?AGID='...