VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution', 'Description' = %q VMTurbo Operations Manager 4.6 and prior ar...

VMTurbo Operations Manager 4.6 - 'vmtadmin.cgi' Remote Command Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'VMTurbo Operations Manager 4.6 vmtadmin.cgi Remote Command Execution', 'Description' = %q VMTurbo Operations Manager 4.6 and prior ar...

Square: Blind SQL injection in www.bookfresh.com

The resource at /reservations doesn't properly sanitise the "client" variable before putting it into a MySQL statement. This results in a Blind SQL Injection vulnerability. We can demonstrate the vulnerability by making the SQL server wait for a while before responding. PoC wait a while:...

IndiaNIC FAQs Manager 1.0 - Blind SQL Injection

The faqs-manager WordPress plugin was affected by a Blind SQL Injection security vulnerability...

SendIt <= 1.5.9 - Blind SQL Injection

The Sendit WP Newsletter WordPress plugin was affected by a Blind SQL Injection security vulnerability...

NextGEN Smooth Gallery - Blind SQL Injection

The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...

UPM-POLLS 1.0.4 - BLIND SQL injection

The upm-polls WordPress plugin was affected by a BLIND SQL injection security vulnerability...

Disqus Blog Comments <= 2.77 - Blind SQL Injection

The Disqus Comment System WordPress plugin was affected by a Blind SQL Injection security vulnerability...

WP-Predict 1.0 - Blind SQL Injection

The wp-predict WordPress plugin was affected by a Blind SQL Injection security vulnerability...

Paid Business Listings - Blind SQL Injection

Form Submission pbllistingpkgid Parameter...

Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit

...

Related Sites 2.1 - Blind SQL Injection

The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability...

Yahoo!: caesary.yahoo.net Blind Sql Injection

Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...

CMS VIA-X SQL Injection

Blind Sql Injection on CMS VIA-X + Date: 23/07/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.viax.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: ultimasnoticias.php + Dork :...

Microsoft MSN HBE Blind SQL Injection

Document Title: =============== Microsoft MSN HBE - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1183 Video: http://www.vulnerability-lab.com/getcontent.php?id=1282 Vulnerability Magazine:...

TinyShop sql注入#3（ 可无限充值）

简要描述： rt 详细说明： 我们看到 /protected/controllers/ucenter.php public function infosave $name = Filter::sqlReq::args"name"; $id = $this-user'id'; $this-model-table"user"-dataarray"name"=$name-where"id=$id"-update; $this-model-table"customer"-where"userid=$id"-update; $obj = $this-model-table"user as...

Microsoft MSN HBE - TB Blind SQL Injection Vulnerability

Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...

Microsoft MSN HBE - TB Blind SQL Injection Vulnerability

Document Title: =============== Microsoft MSN HBE - TB Blind SQL Injection Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1282 Video: http://www.vulnerability-lab.com/getcontent.php?id=1183 View Video: https://www.youtube.com/watch?v=JvCgZ2aYas...

InvGate Service Desk 4.2.36 SQL Injection Vulnerability

InvGate Service Desk version 4.2.36 suffers from multiple remote SQL injection vulnerabilities. InvGate Service Desk v4.2.36 multiple vulnerabilities http://www.invgate.com/en/service-desk/ http://www.invgate.com/en/service-desk/on-premise-trial/ Invgate Service Desk suffers from many SQL...

InvGate Service Desk 4.2.36 SQL Injection

InvGate Service Desk v4.2.36 multiple vulnerabilities http://www.invgate.com/en/service-desk/ http://www.invgate.com/en/service-desk/on-premise-trial/ Invgate Service Desk suffers from many SQL injections as an authenticated, but non-privileged end-user role user. Most are also stacked injections...