Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor:...

WordPress Plugin Ripe HD FLV Player - SQL Injection

------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-16 E-mail = [email protected]...

WordPress FLV Player Plugin 1.1 - SQL Injection

This WordPress FLV Player plugin's "id" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Hitasoft FLV Player 1.1 SQL Injection

Exploit Title: Wordpress Hitasoft FLV Player 1.1 SQL Injection Vulnerability Google Dork: inurl:"hitasoftplayer/config.php?id=" Exploit Author: Ashiyane Digital Security Team Software Link: http://hitasoft.com/hitasoftplayer.zip Category: Web Application Version: 1.1 Tested on: Windows 7 Location...

WordPress Plugin FLV Player - id SQL Injection

WordPress Plugin FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/56418/info The FLV Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit...

WordPress Plugin FLV Player - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56418/info The FLV Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application, acce...

WordPress Plugin HD FLV Player - uploadVideo.php Arbitrary File Upload

WordPress Plugin HD FLV Player - uploadVideo.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53967/info HD FLV Player plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately...

WordPress Plugin HD FLV Player - 'uploadVideo.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53967/info HD FLV Player plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to...

WordPress HD FLV Player 1.7 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Plugins - WordPress HD FLV Player Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

VulnCheck KEV: CVE-2007-6144

Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll1work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information...

FLV Player flash application multiple security vulnerabilities

Content spoofing, crossite scripting...

Уязвимости в FLV Player

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Content Spoofing и Cross-Site Scripting уязвимостях в флеш видео плеере FLV Player. Content Spoofing WASC-12: Флешки плеера FLV Player принимают произвольные адреса в параметре configxml, что позволяет подделать содержимое флешки - например, указа...

FLV Player Content Spoofing / Cross Site Scripting

Hello list! I want to warn you about Content Spoofing and Cross-Site Scripting vulnerabilities in FLV Player. ------------------------- Affected products: ------------------------- Vulnerable are different versions of FLV Player MINI, NORMAL, MAXI and MULTI. Note, that version NORMAL occurs under...

Moyea FLV Player(.flv)Local Crash Poc

Exploit for windows platform in category dos / poc !/usr/bin/python print "" print " Name: Moyea FLV Player.flvLocal Crash Poc " print " Author: Angel Injection " print " Email: email protected " print " home page: http://club-h.co.cc http://sec-krb.org " print "" try : junk = "\x41" 10000 f =...

WordPress Contus HD FLV Player 1.3 SQL Injection

Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item : mysqlquery"UPDATE $wpdb-prefix" . "hdflvmed2play SET sorder =...

WordPress Contus HD FLV Player plugin <= 1.3 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Contus HD FLV Player plugin = 1.3 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/contus-hd-flv-player.1.3.zip Version: 1.3...

WordPress Plugin Contus HD FLV Player 1.3 - SQL Injection

WordPress Plugin Contus HD FLV Player 1.3 - SQL Injection Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item :...

WordPress Contus HD FLV Player plugin <= 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item :...

WordPress Contus HD FLV Player Plugin <= 1.3 - SQL Injection

This WordPress Contus HD FLV Player plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...