WordPress Ultimate Product Catalog 3.9.8 Plugin - (do_shortcode via ajax) Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: Wordpress Ultimate-Product-Catalog getrow"SELECT FROM $cataloguestablename WHERE CatalogueID=" . $id; $CatalogueItems = $wpdb-getresults"SELECT FROM $catalogueitemstablename WHERE CatalogueID=" . $id . " ORDER BY Position";...

Uber: Blind OOB XXE At "http://ubermovement.com/"

Test Summary : - POST data was set to &dtgmlf6ent; An HTTP request was initiated for the domain http://122.180.248.81/ which indicates that this script is vulnerable to XXE injection. NOTE : As it was Blind XXE Test I was Successful in Ping Test for XXE. But unable to retrieve any sensitive...

WordPress Plugin Video Player 1.5.16 - SQL Injection

WordPress Plugin Video Player 1.5.16 - SQL Injection !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on Contribut...

WordPress Video Player 1.5.16 Plugin - SQL Injection

Exploit for php platform in category web applications !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on...

Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String

!/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based Exploiting string located on the heap - Blind Attack No output...

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String

Axis Communications MPQTPACS 5.20.x - Server-Side Include Daemon Remote Format String !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following...

Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Remote Format String

Exploit for multiple platform in category remote exploits !/usr/bin/env python2.7 SOF Remote Format String Exploit Axis Communications MPQT/PACS Server Side Include SSI Daemon Research and development by bashis 2016 This format string vulnerability has following characteristic: - Heap Based...

Nexthon Whois Website Value Calculator 1.5 SQL Injection

======================================================================== | Title : Nexthon Whois Website Value Calculator 1.5 Blind Sql injection | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.5 | Vendor :...

Clinic Management System Blind SQL Injection

Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All Versions Tested on : Apache | PHP 5.5.36 | MySQL...

Beauty Parlour And SPA Saloon Management System SQL Injection

Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...

Clinic Management System - Blind SQL Injection

Exploit for php platform in category web applications Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version :...

Beauty Parlour SPA Saloon Management System - Blind SQL Injection

Beauty Parlour SPA Saloon Management System - Blind SQL Injection Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage :...

Beauty Parlour & SPA Saloon Management System - Blind SQL Injection

Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...

Clinic Management System - Blind SQL Injection

Clinic Management System - Blind SQL Injection Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All...

Clinic Management System - Blind SQL Injection

Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All Versions Tested on : Apache | PHP 5.5.36 | MySQL...

Beauty Parlour & SPA Saloon Management System - Blind SQL Injection

Exploit for php platform in category web applications Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage :...

Weaver E-cology wui/theme/ecology7/page/login. jsp parameter templateId time blind

No description provided by source...

Ktools Photostore 4.7.5 - Blind SQL Injection

No description provided by source...

modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection

No description provided by source...

Ktools Photostore 4.7.5 - Blind SQL Injection

Title : Ktools Photostore = 4.7.5 Pre-Authentication Blind SQL Injection CVE-ID : CVE-2016-4337 Google Dork: inurl:mgr.login.php Product : Photostore Affected : Versions prior to 4.7.5 Impact : Critical Remote : Yes Website link: http://www.ktools.net Reported : 02/06/2016 Authors : Gal Goldshtei...