WordPress Plugin WP-Predict 1.0 - Blind SQL Injection

WordPress Plugin WP-Predict 1.0 - Blind SQL Injection Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.pootlepress.co.uk/ Software Link: http://downloads.wordpress.org/plugin/wp-predict.zip Version: 1.0...

WordPress WP Predict Plugin 1.0 - Blind SQL Injection

WP Predict plugin is prone to a Blind SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

Wordpress Plugins - WP-Predict v1.0 Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.pootlepress.co.uk/ Software Link: http://downloads.wordpress.org/plugin/wp-predict.zip Version: 1.0...

WordPress WP-Predict 1.0 Blind SQL Injection

Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.pootlepress.co.uk/ Software Link: http://downloads.wordpress.org/plugin/wp-predict.zip Version: 1.0 ===================== Vulnerability Details =====================...

WordPress Plugin WP-Predict 1.0 - Blind SQL Injection

Exploit Title: WordPress WP-Predict v1.0 Blind SQL Injection Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.pootlepress.co.uk/ Software Link: http://downloads.wordpress.org/plugin/wp-predict.zip Version: 1.0 ===================== Vulnerability Details =====================...

NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection

High Risk Vulnerability in Nagios XI Network Monitor 2 July 2012 Daniel Compton of NCC Group has discovered a High risk vulnerability in Nagios XI Network Monitor Impact: Nagios XI Network Monitor Blind SQL Injection Versions affected: Nagios XI Network Monitor 2011R1.9 An updated version of the...

Webmatic 3.1.1 - Blind SQL Injection

Advisory ID: HTB23096 Product: Webmatic Vendor: valarsoft.com Vulnerable Versions: 3.1.1 and probably prior Tested Version: 3.1.1 Vendor Notification: 13 June 2012 Public Disclosure: 4 July 2012 Vulnerability Type: Blind SQL Injection CVE Reference: CVE-2012-3350 CVSSv2 Base Score: 7.5...

WordPress MoodThingy Widget 0.9.7 SQL Injection

Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link: http://downloads.wordpress.org/plugin/moodthingy-mood-rating-widget.0.8.7.zip Version: 0.8.7 =====================...

WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection

Exploit Title: WordPress MoodThingy Mood Rating Widget v0.8.7 Blind SQL Injection Date: 7/2/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.moodthingy.com/ Software Link: http://downloads.wordpress.org/plugin/moodthingy-mood-rating-widget.0.8.7.zip Version: 0.8.7 =====================...

Webmatic 3.1.1 Blind SQL Injection

Advisory ID: HTB23096 Product: Webmatic Vendor: valarsoft.com Vulnerable Versions: 3.1.1 and probably prior Tested Version: 3.1.1 Vendor Notification: 13 June 2012 Public Disclosure: 4 July 2012 Vulnerability Type: Blind SQL Injection CVE Reference: CVE-2012-3350 CVSSv2 Base Score: 7.5...

WordPress Paid Business Listings v1. 0. 2 blind-vulnerability warning-the black bar safety net

Title: WordPress Paid Business Listings v1. 0. 2 Blind SQL Injection Author: Chris Kellum Program website: http://www.blazingtorch.com/ Download address: http://downloads.wordpress.org/plugin/paid-business-listings.1.0.2.zip Impact version: 1.0.2 Plug-in details This plugin has a 3 stage process,...

WordPress Paid Business Listings v1.0.2 Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link:...

WordPress Paid Business Listings Plugin 1.0.2 - Blind SQL Injection

This WordPress Paid Business Listings plugin is prone to a blind SQL injection. Input data from the form submission is not properly sanitized and false statements will not appear on the busines listings page, while true statements will result in the listing appearing on the business listings page...

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link:...

WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection

Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link: http://downloads.wordpress.org/plugin/paid-business-listings.1.0.2.zip Version: 1.0.2 ============== Plugin Details...

Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------------- Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability ----------------------------------------------------------------------------- Author....: fame...

Parodia 6.8 employer-profile.asp Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

UCCASS 1.8.1 Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...

UCCASS 1.8.1 - Blind SQL Injection

UCCASS 1.8.1 - Blind SQL Injection :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2...

UCCASS 1.8.1 - Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...