111 matches found
PHP Scripts Mall Consumer Complaints Clone Script SQL Injection Vulnerability
PHP Scripts Mall Consumer Complaints Clone Script is a set of PHP based consumer online complaints and reviews website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Consumer Complaints Clone Script version 1.0. A remote attacker can exploit the...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
Sql injection
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17605
The CVE-2017-17605 vulnerability affects the Consumer Complaints Clone Script 1.0, with an SQL Injection in the other-user-profile.php?id parameter. Root cause is unsafe handling of the id parameter, enabling a remote attacker to manipulate queries. Impact is high (confidentiality/integrity/avail...
Consumer Complaints Clone Script 1.0 SQL Injection
Exploit Title: Consumer Complaints Clone Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/consumer-complaints-clone-script/ Demo: http://fxwebsolution.com/demo/consumer-complaints/ Version:...
CWEs in NVD CVE feed: analysis and complaints
As you probably know, one of the ways to describe the nature of some software vulnerability is to provide corresponding CWE Common Weakness Enumeration ids. Let's see the CWE links in NVD CVE base. I have already wrote earlier how to deal with NVD feed using python in "Downloading and analyzing N...
Complain Management System - Hard-Coded Credentials / Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Complain Management System Blind SQL Injection Date: 10 October 2017 Exploit Author: havysec Tested on: ubuntu14.04 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download Software:...
Complain Management System - Hard-Coded Credentials / Blind SQL injection
Exploit Title : Complain Management System Blind SQL Injection Date: 10 October 2017 Exploit Author: havysec Tested on: ubuntu14.04 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download Software:...
High Performance DNS Stub Resolver: MassDNS
A high performance DNS stub resolver in C MassDNS is a simple high-performance DNS stub resolver targetting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 100,000,000 domains...
You are not alone; WhatsApp is down for many (Updated)
By Carolina If you are wondering whats going on with the popular messenger app WhatsApp then you are not alone because its service is down in many countries. Although it is unclear whats going on and why the service is down theres a massive number of users complaining on Twitter. WhatsApp users i...
InterContinental Hotels Confirms Credit Card Breach
InterContinental Hotels Group IHG, parent company to Crowne Plaza, Holiday Inn and Kimpton Hotels and Resorts, confirmed on Friday a breach of payment card systems used in 12 of its hotels located in North America and the Caribbean. According to IHG, which operates 5,000 hotels worldwide, malware...
Complain Management System - SQL injection
Complain Management System - SQL injection Title : Complain Management System SQL Injection Date: 20 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: https://sourceforge.net/projects/complain-management-system/ Version: not supplied Download...
Facebook Bug Declares Millions of Users Dead, Including Zuckerberg!
Last night, Facebook declared everyone dead, including the company's CEO Mark Zuckerberg, in a massive memorial 'remembering' profile glitch. Well, that's awkward. Despite being very much alive, Facebook users, when logged on to their accounts on Friday afternoon, found their accounts turned to a...
Microsoft 'Accidentally' pushed 'Test patch' Update to All Windows 7 Users
A highly mysterious update that was pushed out to Windows machines globally was the result of a test that was not correctly implemented. Yes, Microsoft accidentally released a test patch KB3877432 to consumer machines running Windows 7, making users believe that the Windows Update service got...
AOL Email Hacked to Send Spam
In Internet years, AOL and its webmail counterpart AOL Mail are beyond ancient at this point. A relic of electronic mail history, the majority of users have long since jumped ship for Gmail or Yahoo. Yet those who still have accounts with AOL were no doubt unhappy when they discovered last weeken...
Google Transparency Report Requests Up to Remove Information
Google has released a new Transparency Report, this time pointing out sharp increases in the number of government requests from Brazil and Russia it received to remove content from Google-branded websites. This is the seventh time the Mountain View-based company has released the report that...
Groupon Piggyback Site Offers $500 Voucher, Charges Users for Allegedly 'Free' Trial Offers
A domain registered two days ago as groupon500.com, which claims to offer a $500 voucher toward Groupon or its primary competitor, LivingSocial, is actually registering users for ‘free’ trial offers that aren’t free at all. The best part, however, is that everything about this scam is perfectly...
Facebook Ticker partially Removed Due To Various Bugs
Facebook Ticker partially Removed Due To Various Bugs According to a Post on Facebook Known Issues Page, Facebook has removed the ticker apparently motivated the social network to call the phenomenon a bug that's undergoing a fix. Facebook says that "Some people are seeing their ticker disappear...
Feeling Heat Facebook Adds Google+ Like Privacy Controls
History has taught us that monopolies are bad for consumers. It was true in the first decades of the 20th century with Standard Oil, and in the final decade of the same century with Microsoft. Its been true, in recent years, with social networking behemoth, Facebook, also. But now, with Google’s...