4251 matches found
Ktools Photostore 4.7.5 - Blind SQL Injection
Exploit for php platform in category web applications Title : Ktools Photostore = 4.7.5 Pre-Authentication Blind SQL Injection CVE-ID : CVE-2016-4337 Google Dork: inurl:mgr.login.php Product : Photostore Affected : Versions prior to 4.7.5 Impact : Critical Remote : Yes Website link:...
Dokeos 2.2.1 - Blind SQL Injection
No description provided by source...
Dokeos 2.2.1 - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip...
Dokeos 2.2.1 - Blind SQL Injection
Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip Version: 2.2.1 Tested on: Ubuntu Twitter :...
Drale DBTableViewer 100123 - Blind SQL Injection
Exploit for php platform in category web applications Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...
modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection
Exploit for php platform in category web applications...
Gratipay: Possible Blind SQL injection | Language choice in presentation
I haven't managed to inject something, but I just want to make sure that this input is filtered. See the attached screenshot...
gongwalker API Manager v1.1 - Blind SQL Injection
No description provided by source...
WordPress Booking Calendar Contact Form 1.0.23 盲注
No description provided by source...
Informatica: [informatica.com] Blind SQL Injection
Hi guys! JSON POST parameter "docId" is vulnerable to Blind SQL Injection attack PoC Raw query POST /vtibin/RatingsCalculator/RatingsCalculator.asmx/CalculateRatings HTTP/1.1 User-Agent: Opera/9.80 Windows NT 6.1; WOW64 Presto/2.12.388 Version/12.17 Host: kb-test.informatica.com Accept-Language:...
Tiny Tiny RSS Blind SQL Injection
Exploit Title: Tiny Tiny RSS Blind SQL Injection Date: 15-02-2016 Software Link: http://tt-rss.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $itemid inside processcategoryorder is not properly...
Tiny Tiny RSS - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Tiny Tiny RSS Blind SQL Injection Date: 15-02-2016 Software Link: http://tt-rss.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...
WordPress User Meta Manager 3.4.6 Blind SQL Injection
Exploit Title: WordPress User Meta Manager Plugin Blind SQLI Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/ Software Link:...
WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection
WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection Exploit Title: WordPress User Meta Manager Plugin Blind SQLI Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...
WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection
Exploit Title: WordPress User Meta Manager Plugin Blind SQLI Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/ Software Link:...
WordPress User Meta Manager Plugin 3.4.6 - Blind SQL Injection
Because of this vulnerability, arbitrary MySQL commands can be passed to "ummuser" GET parameter by a registered user. Solution Update the plugin...
WordPress User Meta Manager 3.4.6 Plugin - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress User Meta Manager Plugin Blind SQLI Discovery Date: 2015/12/28 Public Disclosure Date: 2016/02/04 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://jasonlau.biz/home/...
WordPress Formidable Forms Plugin <= 1.07.11 - Blind SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...
Gongwalker API Manager 1.1 - Blind SQL Injection
gongwalker API Manager v1.1 - Blind SQL Injection Exploit Title: gongwalker API Manager v1.1 - Blind SQL Injection Date: 2016-01-25 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/gongwalker/ApiManager Software Link:...