ZeusCart 4.x Remote SQL Injection

On May 27th our research labs discovered a vulnerability CVE-2014-3868 in an e-commerce shopping cart application known as "ZeusCart". The same day, we reported this vulnerability to mitre.org and the CVE was assigned. We were able to get in touch with the vendor with a confirmed response...

VMTurbo Operations Manager vmtadmin.cgi Remote Command Execution

VMTurbo Operations Manager 4.6 and prior are vulnerable to unauthenticated OS Command injection in the web interface. Use reverse payloads for the most reliable results. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the cmd generic...

TinyShop 多处SQL注入漏洞

简要描述： 只看了2个文件。官网测试成功。 详细说明： protected\controllers\simple.php 1 public function orderinfo $id = Filter::intReq::args'id'; $productid = Req::args'pid'; $type = Req::args"type"; if$this-checkOnline if$type=='groupbuy' $model = new Model"groupbuy as gb"; $item = $model-join"left join goods as go on...

ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability

ESA-2014-024.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability EMC Identifier: ESA-2014-024 CVE Identifier: CVE-2014-2503 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • E...

WahmShoppes eStore Cross Site Scripting / SQL Injection Vulnerabilities

WahmShoppes eStore suffers from cross site scripting, information disclosure, and remote SQL injection vulnerabilities. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : multiple Vulnerability in "WahmShoppes eStore" Author : alieye vendor : http://www.wahmshoppes.com/ Contact :...

Videos Tube 1.0 - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Videos Tube SQL Injection and Remote Code Execution Google Dork: inurl:"single.php?url=" video Date: 05.05.2014 Exploit Author: Mustafa ALTINKAYNAK Vendor Homepage: http://www.phpscriptlerim.com Software Link:...

Maccms 最新注入一枚。

简要描述： 看到maccms又更新了 果断下来看看。 本来可以Sql的地方还挺多。。 但是由于自带的360防注入脚本。。我没办法绕过。 还是找到了一处, 如果没这防注入的话可以直接利用这注入登录后台。。 可是。。 老老实实盲注把。 详细说明： maccms 基本上都是调用be函数来代替$POST之类的。 都做了addslashes。 在admin/adminconn.php中 function chkLogin global $db; $mid = getCookie'adminid'; $mname = getCookie'adminname'; $mcheck =...

CVE-2014-0215

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

Design/Logic Flaw

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

CVE-2014-0215

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

CVE-2014-0215

CVE-2014-0215 affects Moodle versions up to 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3. The vulnerability stems from the blind-marking implementation, allowing remote authenticated users to de-anonymize student identities by (1) using a screen reader or (2) reading th...

CVE-2014-0215

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

CVE-2014-0215: Exposure of Sensitive Information to an Unauthorized Actor

The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by 1 using a screen reader or 2 reading the HTML source...

SQL Servers Blind SQL Injection

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...

BSS Continuity CMS 4.2.22640.0 SQL Injection

Vulnerability title: Unauthenticated Blind SQL Injection in BSS Continuity CMS CVE: CVE-2014-3446 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: he following URL and parameters have been confirmed to suffer from Blind SQL...

SMART iPBX SQL Injection Vulnerability

SMART iPBX suffers from multiple remote SQL injection vulnerabilities. SMART iPBX - Multiple Sql Injection =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home : http://www.iphobos.com/blog/ .:...

CRMAPP SQL Injection

Crm Application - Time-Based Blind Injection =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.crmapp.com/ Time-Based Blind...

SMART iPBX SQL injection

SMART iPBX - Multiple Sql Injection =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://softmatica.com.do/softmatica/?p=216 Multiple Sql...

easytalk一处盲注

简要描述： easytalk一处盲注 详细说明： 问题出在mailactivity函数，其过滤daddslashes在base64decode之前，但是后面没有输出，不过没关系，我们可以盲注 public function mailactivity parent::tologin; $authmsg=daddslashes$GET'auth'; $authmsg=base64decode$authmsg; //这里反了…… $tem=explode":",$authmsg; $sendid=$tem0; $user=M'Users'; $row =...

CMS HINTWEB Cross Site Scripting / SQL Injection

Cross Site Scripting on CMS HINTWEB + Date: 04/05/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.hintweb.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: index.php + Exploit : http://host//index.php?txtMSG=XSS + PoC...