CVE-2018-5973: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

PT-2018-17259

Name of the Vulnerable Software and Affected Versions: Professional Local Directory Script version 1.0 Description: A SQL Injection issue exists in the software, specifically via the IndustryID parameter in the "sellers subcategories.php" and "suppliers.php" files, as well as the CategoryID...

Professional Local Directory Script 1.0 SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...

Professional Local Directory Script 1.0 - SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...

Article Directory Script SQL Injection Vulnerability

Article Directory Script is a script for creating article directories in websites. A SQL injection vulnerability exists in Article Directory Script version 3.0. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the author.php or category.php file to inject SQL...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

Sql injection

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15960

Affected software: Article Directory Script 3.0. Vulnerability: SQL injection via the GET parameter id in author.php and category.php. Root cause: improper handling/sanitization of id leading to SQL command injection. Impact (per sources): high to critical across confidentiality, integrity, and a...

CVE-2017-15960: Improper Neutralization of Special Elements used in an SQL Command

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

PT-2017-14314

Name of the Vulnerable Software and Affected Versions Article Directory Script version 3.0 Description The issue allows SQL Injection via the id parameter to "author.php" or "category.php" API endpoints. Recommendations For Article Directory Script version 3.0, avoid using the id parameter in the...

Word Directory Script 2.1 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Word Directory Script v 2.1 - Cross Site Scripting / SQL Injection Credit: Bilal KARDADOU Vendor: http://www.phponly.com/ Vendor URL: http://www.phponly.com/words.html Product: Word Directory Script v 2.1 Google Dork: N/A Product &...

Social Directory Script SQL Injection Vulnerability

Social Directory Script is a website that helps users to quickly build a social directory, where they can create a list of their favorite websites and add their favorite websites to the list. Social Directory Script 2.0 suffers from SQL injection in several parameters such as search and category...

Social Directory Script 2.0 - SQL Injection

Social Directory Script 2.0 - SQL Injection Exploit Title: Social Directory Script 2.0 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.phponly.com/ Software: http://www.phponly.com/Social-Directory.html Demo: http://www.phponly.com/demo/link/ Version: 2.0 Tested on:...

Social Directory Script 2.0 - SQL Injection

Exploit Title: Social Directory Script 2.0 - SQL Injection Google Dork: N/A Date: 11.04.2017 Vendor Homepage: http://www.phponly.com/ Software: http://www.phponly.com/Social-Directory.html Demo: http://www.phponly.com/demo/link/ Version: 2.0 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihs...

Alibaba Clone Script - SQL Injection

Alibaba Clone Script - SQL Injection Exploit Title: Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://b2bbusinessdirectoryscript.com/alibaba-clone-script.html Demo: http://thealidemox.com Version: N/A Tested on: Win...

Clone Script Directory Script 1.1.0 - cid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippy ScriptZone – Clone Script Directory Script v1.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

NGO Directory Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: NGO Directory Script Script Buy Now: http://www.popularclones.com/products/NGO-Directory-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Business Directory Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Business Directory Script Script Buy Now: http://www.popularclones.com/products/Business-Directory-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...