EUVD-2018-17751

Malware in sbrugna...

Easy Car Script SQL Injection Vulnerability

Easy Car Script is a set of online car category display scripts. A SQL injection vulnerability exists in the 2014 version of Easy Car Script. A remote attacker can exploit the vulnerability by sending the 'sorder' or 'srow' parameter to the sitesearch.php file to inject SQL commands...

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

Sql injection

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

CVE-2018-5986

CVE-2018-5986 is an SQL injection in Easy Car Script 2014, triggered by the s_order or s_row parameter to site_search.php. The vulnerability allows injection of SQL commands and is documented in multiple sources (NVD, CNVD, CVE lists) with PoC/exploit references indicating remote exploitation. Co...

CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

Easy Car Script 2014 SQL Injection

Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Exploit Author: Ihsan Sencan Author Web:...

CVE-2018-5986: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...

PT-2018-17272

Name of the Vulnerable Software and Affected Versions: Easy Car Script 2014 Description: The issue exists due to SQL Injection in the s order or s row parameter to the "site search.php" endpoint. Recommendations: For Easy Car Script 2014, avoid using the s order or s row parameters in the "site...

Easy Car Script 2014 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Easy Car Script 2014 - SQL Injection

Easy Car Script 2014 - SQL Injection Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Explo...