Wordpress CP Multi View Event Calendar 1.01 - SQL Injection

No description provided by source. Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 /...

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

Sql injection

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2014-8586

CVE-2014-8586 affects the CP Multi View Event Calendar plugin for WordPress (version 1.01) and is due to a SQL injection in the calid parameter, enabling remote arbitrary SQL execution. The connected sources provide concrete details: the vulnerability vector is web/HTTP via calid, with the underl...

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

CVE-2014-8586: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter...

WordPress Multi View Event Calendar SQL Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection

Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap 0.8-1 Linux / Mozilla Firef...

WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection

WordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows...

WordPress CP Multi View Event Calendar 1.01 SQL Injection Vulnerability

WordPress CP Multi View Event Calendar plugin version 1.01 suffers from a remote SQL injection vulnerability. Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link :...

PT-2014-8633

Name of the Vulnerable Software and Affected Versions CP Multi View Event Calendar plugin version 1.01 for WordPress Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the calid parameter. Recommendations For CP Multi View Event Calendar plugin...

WordPress CP Multi View Event Calendar 1.01 SQL Injection

Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap 0.8-1 Linux / Mozilla...

CVE-2014-2531

InterWorx Web Control Panel (InterWorx-CP) before 5.0.14 build 577 is vulnerable to SQL injection in xhr.php via the i parameter in the search action for NodeWorx, SiteWorx, and Resellers interfaces. Root cause is that the application constructs dynamic SQL by concatenating user input without pro...

Ebay Inc Magento ProStore CP Filter Bypass

Document Title: =============== Ebay Inc Magento ProStore CP 4 - Filter Validation Bypass & Persistent Payment Information Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1265 Ebay Inc ID: EIBBP-28091 Video:...

Blog System 1.x (note) SQL Injection Vuln

No description provided by source. Script : Blog System Version : 1.x Link : http://netartmedia.net/blogsystem/ Dork : powered by Blog System Table : websiteadminadminusers Columns : id,username,password,type Exploit :...

MyBB Profile Wii Friend Code - Multiple Vulnerabilities

No description provided by source. Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:Profile of intext:Wii Friend Code inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code Software Link:...

cP Creator 2.7.1 - Remote SQL Injection

No description provided by source. !/usr/bin/python cP Creator v2.7.1 Remote Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com - Coming Soon Again My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidan...

Image Viewer CP Gold 5.5 - Image2PDF() Buffer Overflow (msf)

No description provided by source. Image Viewer CP gold v5.5 Buffer Overflow Found by: bz1p AT bshellz.net Impact: Low, NOT marked safe for scripting or initializing CVE: ? 0day msf exploitimageviewercpgold Sending exploit to 172.17.120.211:1061... Sending stage 749056 bytes to 172.17.120.211...

Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles() Buffer Overflow

No description provided by source. html !-- Exploit Title: Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles Buffer Overflow Exploit Found By: DrIDE Download: http://www.viscom.com Greets: bz1p, [email protected] for finding the app. Tested on: XP SP3 IE7 CVE: 0day -- object...