Gongwalker API Manager 1.1 - Blind SQL Injection

gongwalker API Manager v1.1 - Blind SQL Injection Exploit Title: gongwalker API Manager v1.1 - Blind SQL Injection Date: 2016-01-25 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/gongwalker/ApiManager Software Link:...

kingdee办公系统的文件/kingdee/portal/portal_info.jsp存在Blind SQL注入漏洞

No description provided by source...

Exam Board 3.0.0 Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

Skybox Platform < 7.0.611 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Skybox Platform vulnerable version: =7.0.611 fixed version: 7.5.401 CVE number: impact: Critical homepage:...

WordPress Users Ultra Plugin 1.5.50 - Blind SQL injection

Because of this vulnerability, an attacker can change tag, type, description, photo or video name, category or unique id by setting POST parameters, such as "photodesc", "phototags" or "photo name", "videotype", "videoname", etc. Solution Update the plugin...

WordPress GigPress Plugin <= 2.3.10 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and blind SQL injection vulnerabilities. Attackers can inject arbitrary JavaScript or HTML code or execute arbitrary SQL commands. Solution Update the plugin...

GoCodes <= 1.3.5 - Authenticated XSS & Blind SQL Injection

The gocodes WordPress plugin was affected by an Authenticated XSS & Blind SQL Injection security vulnerability...

WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection

The wp-stats-dashboard WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WP RSS Multi Importer <= 3.15 - Blind SQL Injection & Cross-Site Scripting (XSS)

The wp-rss-multi-importer WordPress plugin was affected by a Blind SQL Injection & Cross-Site Scripting XSS security vulnerability...

AlegroCart 1.2.8 - Multiple SQL Injections

AlegroCart 1.2.8 - Multiple SQL Injections Security Advisory - Curesec Research Team 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix17102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1040 Vendor Website: http://alegrocart.com/ Vulnerability Type: SQL...

AlegroCart 1.2.8 - Multiple SQL Injections

Security Advisory - Curesec Research Team 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix17102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1040 Vendor Website: http://alegrocart.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported ...

WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection

WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection

WP Fastest Cache plugin's plugin to a blind SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this vulnerabilitie...

Pligg CMS 2.0.2 - Multiple SQL Injections

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Pligg CMS 2.0.2 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://pligg.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 09/01/2015 Disclosed to public: 10/07/2015 Releas...

wp-championship <= 5.8 - Authenticated Blind SQL Injection

The wp-championship WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability. PoC $ sqlmap -u 'http://www.example.com/wp-admin/wp-championship/csadminusers.php=' --data="isadmin=1" --cookie=AUTHCOOKIEHERE --level=5 --risk=3...

ZEDx 2.0 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : ZEDx 2.0 - Blind SQL Injection Vulnerability Author : ZwX Version : ZEDx 2.0 Demo Online : http://demo.zedx.org/ Vendor : http://www.zedx.org/ Date : 09/12/2014 ------------------------------- Description ------------------------------...

PHP-Fusion 7.02.07 - Blind SQL Injection

PHP-Fusion 7.02.07 - Blind SQL Injection ============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score...

PHP-Fusion 7.02.07 Blind SQL Injection Vulnerability

PHP-Fusion versions 7.02.07 and below suffer from a remote blind SQL injection vulnerability in the admin panel. ============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas -...

PHP-Fusion 7.02.07 Blind SQL Injection

============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...