JoomShopping - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: JoomShopping Blind Sql injection Google Dork: allinurl:"/modules/modjshoppingproductswfl/js/" Date: 2015-07-24 Exploit Author: Mormoroth Vendor Homepage: http://www.webdesigner-profi.de Software Link:...

WordPress Filedownload 1.4 Open Proxy

Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified: 2015-07-11 Vendor Contact: [email protected] Description: Creates a downloadlink with t...

JoomShopping - Blind SQL Injection

JoomShopping - Blind SQL Injection Exploit Title: JoomShopping Blind Sql injection Google Dork: allinurl:"/modules/modjshoppingproductswfl/js/" Date: 2015-07-24 Exploit Author: Mormoroth Vendor Homepage: http://www.webdesigner-profi.de Software Link:...

JoomShopping - Blind SQL Injection

Exploit Title: JoomShopping Blind Sql injection Google Dork: allinurl:"/modules/modjshoppingproductswfl/js/" Date: 2015-07-24 Exploit Author: Mormoroth Vendor Homepage: http://www.webdesigner-profi.de Software Link: http://www.webdesigner-profi.de/joomla-webdesign/joomla-shop/downloads.html...

Mail.ru: Time-Based Blind SQL Injection Attacks

Здравствуйте, на сайте http://jh.my.com/forum/ajax/render/memberlistitems обнаружена blind sql. При отправке в POST-запросе : criteriastartwith=ifnow=sysdate,sleep0,0/"XORifnow=sysdate,sleep0,0OR"/ Сервер будет отрабатывать заданное время. Прикрепляю скрин...

Slider <= 2.8.6 - Authenticated Blind SQL Injection

The slider-image WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Microblog Poster <= 1.6.0 - Authenticated Blind SQL Injection

The Microblog Poster – Auto Publish on Social Media WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Slider Plugin <= 2.8.6 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress Quiz And Survey Master Plugin <= 4.4.2 - Blind SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress NEX-Forms Plugin <= 4.0 - Blind SQL Injection

Because of this vulnerability, unauthenticated attackers and authenticatged users can inject arbitrary SQL commands. Solution Upgrade the plugin...

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution

Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution CVEs: CVE-2015-1560, CVE-2015-1561 Vendor: Merethis - www.centreon.com Product: Centreon Version affected: 2.5.4 and prior Product description: Centreon is the choice of some of the world's largest companies...

FileDownload <= 1.4 - Multiple Issues

XSS, Blind SQL Injection and Open Proxy issues...

Wordpress CP Multi View Event Calendar Plugin 1.1.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN...

WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection

WordPress Plugin CP Multi View Event Calendar 1.1.7 - SQL Injection Exploit Title: WordPress cp-multi-view-calendar.1.1.7 Unauthenticated SQL injection vulnerabilities Date: 2015-07-10 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez...

Pinpoint Booking System <= 2.0 - Authenticated Blind SQL Injection

The Pinpoint Booking System – 1 WordPress Booking Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Booking System Plugin <= 2.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands via "language" parameter. Solution Update the plugin...

WordPress Contact Form Builder Plugin <= 1.0.24 - Blind SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade this plugin...

WP Live Chat Support < 4.4.0 - Unauthenticated Blind SQL Injection

The 3CX Live Chat WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability...

WordPress Yet Another Stars Rating Plugin <= 0.9.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users with 'publishposts' role can execute arbitrary SQL commands. Solution Update the plugin...

Symantec Endpoint Protection Manager < 12.1 RU6 Multiple Vulnerabilities (SYM15-005)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6. It is, therefore, affected by the following vulnerabilities : - A DLL injection vulnerability exists due to improper path restrictions when loading DLLs. An authenticated, local attacker ca...