Sql injection

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

CVE-2015-4678

The CVE-2015-4678 issue is a SQL injection in Persian Car CMS 1.0, exploitable via the cat_id parameter in the default URI. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as indicated by the NVD entry (CVSSv...

CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

Persian Car CMS 1.0 SQL Injection

| Title : PersianCarCMS-v.1.0 Sql Injection Vulnerability | Author : indoushka | email : [email protected] | Dork : قدرت گرفته از : Persian CAR CMS | Tested on: windows 8.1 Français V.Pro | Download : http://dl.20script.ir/script/cms/PersianCarCMS-v.1.0%5Bwww.20script.ir%5D.zip...

WordPress Car Dealer Theme - Information Disclosure

Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a /wp-admin/edit.php multiple parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in /wp-admin/post.php and /wp-admin/edit.php multiple parameter. Solution Update the plugin...

WordPress Car Demon Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in /wp-admin/post.php and /wp-admin/edit.php multiple parameters. Solution Update the plugin...

Dennis Fisher and Mike Mimoso Discuss the 2015 Security Analyst Summit

Dennis Fisher and Mike Mimoso discuss their takeaways from the SAS 2015 conference, including the Equation Group APT analysis, hacking car washes, indexing the dark web and hacking home appliances. Download: digitalunderground187.mp3 Music by Chris Gonsalves...

Holes in Progressive Dongle Could Lead to Car Hacks

A device that a popular car insurance company sends to customers to keep track of their driving and reduce their rate may be insecure and could be used to take control of a user’s vehicles. Progressive manufactures the device, a dongle called Snapshot that plugs into the OBD-II diagnostic port on...

Automakers Move to Address Privacy Concerns

Several automakers have agreed on a set of privacy principles that they say will govern the way that they handle personal information generated by vehicles, geolocation data and other sensitive information that is being produced by in-car computers and networks. The principles are the result of...

Information disclosure

The Classic Car Buyer aka com.magazinecloner.carbuyer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7649

The CVE-2014-7649 entry concerns the Android app The Classic Car Buyer (com.magazinecloner.carbuyer) @7F08017A. It states that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...

CVE-2014-7564

The Simple Car Care Tip and Advice aka com.a1481542198504ee106f182c8a.a40350826a application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Simple Car Care Tip and Advice aka com.a1481542198504ee106f182c8a.a40350826a application 1.03 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7564

CVE-2014-7564 affects the Android app Simple Car Care Tip and Advice (1.03). The vulnerability is that the application does not verify SSL X.509 certificates, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The CVSS data indicates ...

CVE-2014-7102

The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7102

The CVE-2014-7102 vulnerability affects the Car Insurance Quote Comparison (com.seopa.quotezone) Android app, version 2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information...

CVE-2014-5996

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...