Joomla Mad4Joomla 1.1.x SQL Injection

Exploit Title : Joomla 1.5.26 Mad4Joomla 1.1.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : mad4media.de Joomla Affected Versions : 1.5.16/1.5.18-1.5.26 Software Affected Versions : 1.1.1 - 1.1.2 - 1.1.3 - 1.1.4 -...

Joomla SwPhotoGallery 1.5.26 SQL Injection

Exploit Title : Joomla SwPhotoGallery 1.5.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : joomla.org Affected Versions : 1.5.16 and 1.5.26 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

Joomla Google Maps 1.0.4 SQL Injection

Exploit Title : Joomla 1.5.26 Google Maps 1.0.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : mapdemo.110mb.com - joomla.org Joomla Affected Version : 1.5.16 and 1.5.26 Software Affected Version : 1.0.4 Owner of the...

JVN#14776551: Multiple vulnerabilities in WordPress Plugin "wpDataTables Lite"

WordPress Plugin "wpDataTables Lite" provided by TMS-Plugins contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2019-6011 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N|...

Thailand Union Library Management 6.2 SQL Injection / XSS

Exploit Title : Thailand Union Library Management 6.2 Cross Site Scripting SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 07/10/2019 Vendor Homepage : ulibm.net - 202.29.234.1/ULIB/index.php Software Affected Versions : 6 and 6.2 Tested On : Windo...

Epignosis eFront LMS unauthenticated SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to login page can cause SQL injections, resulting in data compromise. An attacker can use a browser to trigger these vulnerabilities,...

JVN#93833849: Panasonic Video Insight VMS vulnerable to SQL injection

Video Insight VMS provided by Panasonic Corporation is a video management suite for video security system. Vide Insight VMS contains a SQL injection vulnerability CWE-89. Impact A logged in user may execute an arbitrary SQL statement to the database. Solution Update the software Update the softwa...

Joomla Easy GuestBook 1.0 SQL Injection

Exploit Title : Joomla 1.0.15 Easy GuestBook ComEasyGB Components 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : joomlacode.org/gf/project/easygb/ - joomlart.com Joomla Affected Version : Joomla 1.0.12 - Joomla...

Joomla JomEstate 4.1 SQL Injection

Exploit Title : Joomla 2.5.28 ComJomEstate Real Estate Components 4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : comdev.eu/jomestate Joomla Affected Versions : Joomla 1.5.18 Joomla 1.5.26 - Joomla 1.6 - Joomla 1.7...

Joomla OrgChart 1.0.0 Cross Site Scripting / SQL Injection

Exploit Title : Joomla 1.5.26 ComOrgChart Components 1.0.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : ibrini.com - cmspal.it - altropiano.com - Software Download Link :...

JVN#71877187: Cybozu Garoon vulnerable to SQL injection

Cybozu Garoon provided by Cybozu, Inc. contains an SQL injection vulnerability CWE-89 in the processing of Todo portlet. Impact A user who can login to the product may obtain or alter information stored in the database. Solution Apply the Patch Apply the patch according to the information provide...

Joomla AlphaContent 3. SQL Injection

Exploit Title : Joomla 1.5.26 ComAlphaContent Components 3.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : bestofjoomla.com - joomla.org - pensieroliquido.com Software Information Link :...

Plexo Torresoft Alex Torres Software 2.0 Cross Site Scripting / SQL Injection

Exploit Title : Plexo Torresoft Alex Torres Software 2.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/08/2019 Vendor Homepage : torresoft.co Software Version : 2.0 Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium...

Wikindx 5.8.2 SQL Injection

Exploit Title : Wikindx 5.8.2 Virtual Research Environment Library Manager SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/03/2019 Vendor Homepage : wikindx.sourceforge.net Software Download Link :...

WordPress Plugin JoomSport 3.3 - SQL Injection

Exploit Title: JoomSport 3.3 – for Sports - SQL injection Google Dork: intext:powered by JoomSport - sport WordPress plugin Date:29/07/2019. Exploit Author: Pablo Santiago Vendor Homepage: https://beardev.com/ Software Link: https://wordpress.org/plugins/joomsport-sports-league-results-management...

Rest - Cafe and Restaurant Website CMS - (slug) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET...

Rest - Cafe and Restaurant Website CMS - slug SQL Injection

Rest - Cafe and Restaurant Website CMS - slug SQL Injection Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter...

Rest Cafe And Restaurant Website CMS SQL Injection

Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET Request GET //host/path/news.php?slug=x'...

Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection

Exploit Title: Rest - Cafe and Restaurant Website CMS - SQL Injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/rest-cafe-and-restaurant-website-cms/21630154 CWE : CWE-89 Vulnerable parameter: slug news.php GET Request GET //host/path/news.php?slug=x'...

WebIncorp ERP - SQL injection

WebIncorp ERP - SQL injection Exploit Title: WebIncorp ERP - SQL injection Date: 1.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://www.webincorp.com/products/erp-software-qatar Version: Every version CWE : CWE-89 Vulnerable parameter: prodid productdetail.php GET Request GET...