WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

The "order" and "orderby" parameter is vulnerable for SQL Injection Example URL: http://127.0.0.1:9001/wordpress/wp-admin/admin.php?page=3Din= icfaq&orderby=3D PoC take some time to finish 15min on my Testsystem. I could speed it up with Multithreading but I'm to lazy right now Vulnerable code pa...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

Joomla Component Hbooking <= (sid) Blind SQL injection Vulnerability

Joomla Component Hbooking = sid Blind SQL injection Vulnerability test http://www.ablejourneys.com/index.php?option=comhbooking&view=room&layout=services&sid=21 and true http://www.ablejourneys.com/index.php?option=comhbooking&view=room&layout=services&sid=21 and false 0day.today 2018-01-10...

OpenPLI Webif Arbitrary Command Execution Vulnerability

Some Dream Boxes with OpenPLI version 3 beta images are vulnerable to OS command injection in the Webif 6.0.4 web interface. This is a blind injection, which means that you will not see any output of your command. A ping command can be used for testing the vulnerability. This Metasploit module ha...

OpenPLI Webif Arbitrary Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'OpenPLI Webif Arbitrary Command...

Scrutinizer < 10.1.2 Multiple Vulnerabilities

The version of Scrutinizer NetFlow and sFlow Analyzer running on the remote host is a version prior to 10.1.2, and is, therefore, potentially affected by the following vulnerabilities : - A blind SQL injection vulnerability exists because the 'orderby' and 'gadget' parameters of 'faweb.cgi' fail ...

Rix4Web Portal - Blind SQL Injection

Exploit Title: Rix4Web Portal Remote Blind SQL Injection Vulnerability Date: 02/23/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.rix4web.com/ Software Link: http://www.traidnt.net/vb/traidnt2230161/ Tested on: Linux/Windows A...

Rix4Web Portal - Blind SQL Injection

Rix4Web Portal - Blind SQL Injection Exploit Title: Rix4Web Portal Remote Blind SQL Injection Vulnerability Date: 02/23/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.rix4web.com/ Software Link:...

Rix4Web Portal Remote Blind SQL Injection

Exploit Title: Rix4Web Portal Remote Blind SQL Injection Vulnerability Date: 02/23/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.rix4web.com/ Software Link: http://www.traidnt.net/vb/traidnt2230161/ Tested on: Linux/Windows A...

Rix4Web Portal Remote Blind SQL Injection Vulnerability

Rix4Web Portal suffers from a remote SQL injection vulnerability. Exploit Title: Rix4Web Portal Remote Blind SQL Injection Vulnerability Date: 02/23/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://www.rix4web.com/ Software Link:...

Zenphoto 1.4.4.1 Blind SQL Injection

Exploit Title : Zenphoto ver 1.4.4.1 Blind SQL Injection Author : HosseinNsn Home : http://Emperor-Team.Org Software Link : http://www.zenphoto.org Security Risk : High Version : 1.4.4.1 Tested on : Linux - Windows Google Dork : "Powered by Zenphoto" Exploit :...

Umbra Loader Botnet all version Blind Sql Injection

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Linksys WRT160nv2 apply.cgi Remote Command Injection

Some Linksys Routers are vulnerable to an authenticated OS command injection on their web interface where default credentials are admin/admin or admin/password. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the cmd generic payload...

D-Link DIR615h OS Command Injection

Some D-Link Routers are vulnerable to an authenticated OS command injection on their web interface, where default credentials are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd generic payload...

Netgear DGN1000B setup.cgi Remote Command Execution

Some Netgear Routers are vulnerable to authenticated OS Command injection. The vulnerability exists in the web interface, specifically in the setup.cgi component, when handling the TimeToLive parameter. Default credentials are always a good starting point, admin/admin or admin/password could be a...

Linksys E1500/E2500 Remote Command Execution

Some Linksys Routers are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command. A ping command against a controlled syste...

PHP weby directory software 1.2 - Multiple Vulnerabilities

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

PHP weby directory software 1.2 - Multiple Vulnerabilities

PHP weby directory software 1.2 - Multiple Vulnerabilities =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Power...

X AutoDealer XSS/SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Paypal Bug Bounty #18 - Blind SQL Injection Vulnerability

Document Title: =============== Paypal Bug Bounty 18 - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=673...