WordPress StatTraq 1.3.0 SQL Injection

Exploit Title : WordPress StatTraq 1.3.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2020 Software Download Link : downloads.wordpress.org/plugin/wp-stattraq.zip Software Version : 1.3.0 WordPress Version : 2.6 or higher - 2.8.3 Tested On...

LogicalDoc Virtual Appliance Multiple Vulnerabilities

1. Advisory Information Title: LogicalDoc Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2019-004 Advisory URL: Date published: 2020-03-18 Date of last update: 2020-03-17 Vendors contacted: LogicalDoc Release mode: Coordinated release 2. Vulnerability Information Class: Unrestricted...

Joomla! Component com_newsfeeds 1.0 - feedid SQL Injection

Joomla! Component comnewsfeeds 1.0 - feedid SQL Injection Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Date: 2020-03-10 Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork:...

Joomla com_newsfeeds 1.0 Component - (feedid) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork: inurl:index.php?option=comnewsfeeds...

Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection

Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Date: 2020-03-10 Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork: inurl:index.php?option=comnewsfeeds...

IRISgraphic 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: IRISgraphic sql injection Google Dork: "Powered by www.IRISgraphic.com" Exploit Author: Milad Karimi Vendor Homepage: http://www.irisgraphic.com/ Software Link: http://www.irisgraphic.com/ Category : webapps Version: 1.0 Tested...

IRISgraphic 1.0 SQL Injection

Exploit Title: IRISgraphic sql injection Google Dork: "Powered by www.IRISgraphic.com" Date: 2020.03.07 Exploit Author: Milad Karimi Vendor Homepage: http://www.irisgraphic.com/ Software Link: http://www.irisgraphic.com/ Category : webapps Version: 1.0 Tested on: windows 10 , firefox CVE : CWE-89...

ECTouch ECShop 2.7.3 SQL Injection

Exploit Title : ECTouch ECShop v2.7.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 22/01/2020 Vendor Homepage : ecshop.com - ectouch.cn Software Download Link : ecshop.com/download Software Affected Versions : 1.0 and 2.7.3 Tested On : Windows a...

WordPress WP Fanzone 3.1 SQL Injection Vulnerability

WordPress WP Fanzone theme version 3.1 suffers from a remote SQL injection vulnerability. Exploit Title : Built with WordPress and WP FanZone Themes 3.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Vendor Homepage : wordpress.org -...

WordPress WP Fanzone 3.1 SQL Injection

Exploit Title : Built with WordPress and WP FanZone Themes 3.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/01/2020 Vendor Homepage : wordpress.org - wpdevshed.com/wp-fanzone-theme/ Software Download Link :...

Forma LMS 2.2.1 ajax.adm_server.php dir parameter SQL injections

Summary Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowin...

Forma LMS 2.2.1 /appLms/ajax.server.php filter_cat and filter_status parameters SQL injections

Summary Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

YouPHPTube /objects/videoAddNew.json.php SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause a SQL injection. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

YouPHPTube /objects/subscribe.json.php SQL injection vulnerability

Summary Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

YouPHPTube /objects/commentAddNew.json.php comments_id SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the authenticated portion of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowin...

YouPHPTube /objects/subscribeNotify.json.php user_id SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

YouPHPTube /plugin/AD_Server/view/campaignsVideos.json.php id SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

Joomla MisterEstate 1.5.26 SQL Injection

Exploit Title : Joomla MisterEstate 1.5.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : misterestate.com Affected Versions : 1.5.12/1.5.14/1.5.16/1.5.18/1.5.26 Tested On : Windows and Linux Category : WebApps Exploit...

Joomla Vemod News Mailer 1.0 SQL Injection

Exploit Title : Joomla Vemod News Mailer 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : vemod.unimatrix.net Software Affected Version : 1.0 - 1.5 /administrator/components/comvemodnewsmailer/versioncompat.php...

Joomla Sumoku 3.9.8 SQL Injection

Exploit Title : Joomla Sumoku 3.9.8 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : blueorangegames.com/sumoku/ Affected Version : 3.9.8 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Vulnerabili...