9414 matches found
Cisco Unified Communications Manager SQL Injection Vulnerability
Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A security vulnerability exists in Cisco Unified Communications Manager 11.0 0.98000.225 that does not validate user input within a SQL query. An attacker sending a URL containing an SQL statement cou...
YonYou NC在/nc/servlet/nc.ui.iufo.login.LoginUI存在SQL盲注漏洞
No description provided by source...
kingdee办公系统的文件/kingdee/portal/portal_info.jsp存在Blind SQL注入漏洞
No description provided by source...
Z-BLOG Blind-XXE造成任意文件读取
No description provided by source...
Arastta 1.1.5 SQL Injection
Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015 Releas...
Exam Board 3.0.0 Blind SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
Skybox Platform < 7.0.611 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Skybox Platform vulnerable version: =7.0.611 fixed version: 7.5.401 CVE number: impact: Critical homepage:...
Aethra SV2242E XXE Injection Vulnerability
Aethra SV2242E suffers from an XML external entity injection vulnerability. Author : Ahmed Sultan Email : email protected Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to...
WordPress Users Ultra Plugin 1.5.50 - Blind SQL injection
Because of this vulnerability, an attacker can change tag, type, description, photo or video name, category or unique id by setting POST parameters, such as "photodesc", "phototags" or "photo name", "videotype", "videoname", etc. Solution Update the plugin...
Aethra SV2242E XXE Injection
Author : Ahmed Sultan Email : [email protected] Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to "/cgi-bin/AmiWeb" is not sensitized before being parsed which cause the...
HumHub 0.11.2 and 0.20.0-beta.2 - SQL 注入漏洞
寻找SQL注入的一般步骤： 1、寻找数据输入（表单） 2、注入数据 3、检测异常响应，像HTTP的500错误，SQL报错 该过程可以借助多种工具实现自动化。 用AWVS检测出 /index.php 可能存在SQL注入。 以下地址会报SQL错误，from 字段是注入点: http://localhost/index.php?from=1'"&limit=10&mode=activity&r=space/space/stream&sguid=e9659cfc-886f-4524-94ae-1721999ad43b...
GoCodes <= 1.3.5 - Authenticated XSS & Blind SQL Injection
The gocodes WordPress plugin was affected by an Authenticated XSS & Blind SQL Injection security vulnerability...
WordPress GigPress Plugin <= 2.3.10 - Multiple Vulnerabilities
This plugin is prone to cross site scripting and blind SQL injection vulnerabilities. Attackers can inject arbitrary JavaScript or HTML code or execute arbitrary SQL commands. Solution Update the plugin...
WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection
The wp-stats-dashboard WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
WP RSS Multi Importer <= 3.15 - Blind SQL Injection & Cross-Site Scripting (XSS)
The wp-rss-multi-importer WordPress plugin was affected by a Blind SQL Injection & Cross-Site Scripting XSS security vulnerability...
ClipperCMS 1.3.0 - Multiple SQL Injection Vulnerabilities
Exploit for php platform in category web applications 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to...
AlegroCart 1.2.8 - Multiple SQL Injections
AlegroCart 1.2.8 - Multiple SQL Injections Security Advisory - Curesec Research Team 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix17102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1040 Vendor Website: http://alegrocart.com/ Vulnerability Type: SQL...
AlegroCart 1.2.8 - Multiple SQL Injections
Security Advisory - Curesec Research Team 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix17102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1040 Vendor Website: http://alegrocart.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported ...
WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection
WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...
WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this vulnerabilitie...