5438 matches found
CVE-2017-1002018
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002019
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
CVE-2017-1002013
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/adminsetting.php...
CVE-2017-1002019
The CVE tracks a vulnerability in the WordPress plugin EventR (v1.02.2): the edit.php and event_form.php code do not sanitize input, enabling blind SQL injection via the event parameter. Root cause is inadequate input sanitization; this can allow an attacker to execute arbitrary SQL commands rela...
CVE-2017-1002014
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...
CVE-2017-1002013
CVE-2017-1002013 affects WordPress plugin Image Gallery with Slideshow (v1.5.2) and is due to a Blind SQL Injection via the imgid parameter in image-gallery-with-slideshow/admin_setting.php. The vulnerability allows a remote attacker (no authentication) to send crafted requests over the network a...
CVE-2017-1002015
The CVE-2017-1002015 entry covers a vulnerability in the WordPress plugin Image Gallery with Slideshow, version 1.5.2, where a Blind SQL Injection exists in image-gallery-with-slideshow/admin_setting.php through the selectMulGallery parameter. This is evidenced by multiple connected records (NVD,...
CVE-2017-1002013
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/adminsetting.php...
CVE-2017-1002014: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...
PT-2017-10998
Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability. It occurs because the code in the updateDB.php file does not properly sanitize user input via the recordId variable in the delete function...
PT-2017-10999
Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability in the Membership Simplified plugin for WordPress. Specifically, the code in the updateDB.php file is vulnerable because it fails to sanitize...
CVE-2017-1002009: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...
CVE-2017-1002019: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
PT-2017-11004
Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the selectMulGallery parameter in the image-gallery-with-slideshow/admin setting.p...
PT-2017-11003
Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the gallery name parameter in the admin setting.php file. Recommendations For version...
PT-2017-11002
Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection vulnerability. It can be exploited via the imgid parameter in the "image-gallery-with-slideshow/admin setting.php" endpoint. Recommendations F...
CVE-2017-1002010: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...
PT-2017-11007
Name of the Vulnerable Software and Affected Versions wordpress plugin eventr version 1.02.2 Description The issue concerns a lack of input sanitization in the edit.php form and attendees.php code, allowing for blind SQL injection via the event parameter. Recommendations For version 1.02.2, updat...
CVE-2017-1002018: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...
AirStar Airbnb Clone Script 1.0 SQL Injection
Exploit Title: AirStar Airbnb Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/airstar-airbnb-clone/ Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...