Freelancer - Hire & Find Jobs - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Freelancer - Hire & Find Jobs published at the 'play' market has multiple vulnerabilities...

Freelancer Script 4.0.1 SQL Injection

Title: FREELANCER SCRIPT v4.0.1 - Authentication Bypass & SQL injection Credit: Bilal KARDADOU Vendor: http://www.2daybiz.com Vendor URL: http://2daybiz.com/content/products/products/job-site-script/119-freelancer-script.php Product: FREELANCER SCRIPT v4.0.1 Google Dork: N/A Product & Service...

Itech Freelancer Script 5.13 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Freelancer Script v5.13 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/freelancer-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

Itech Freelancer Script 5.13 - SQL Injection

Itech Freelancer Script 5.13 - SQL Injection Exploit Title: Itech Freelancer Script v5.13 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/freelancer-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

Itech Freelancer Script 5.13 SQL Injection

Exploit Title: Itech Freelancer Script v5.13 a SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/freelancer-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

Itech Freelancer Script 5.13 - SQL Injection

Exploit Title: Itech Freelancer Script v5.13 – SQL Injection Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/freelancer-script/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

iTechscripts Freelancer Script 5.11 SQL Injection

!/usr/bin/perl -w iTechscripts Freelancer Script v5.11 sk SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 11-2017 GMT +7:00 Jakarta, Indonesia Software : Freelancer Script Version : 5.11 Lower versions may also be affected Price : US$199.00 Link :...

iTechscripts Freelancer Script 5.11 - sk Parameter SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w iTechscripts Freelancer Script v5.11 sk SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 11-2017 GMT +7:00 Jakarta, Indonesia Software : Freelancer Script Version : 5.11 Lower versions...

iTechscripts Freelancer Script 5.11 - sk SQL Injection

iTechscripts Freelancer Script 5.11 - sk SQL Injection !/usr/bin/perl -w iTechscripts Freelancer Script v5.11 sk SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 11-2017 GMT +7:00 Jakarta, Indonesia Software : Freelancer Script Version : 5.11 Lower version...

iTechscripts Freelancer Script 5.11 - 'sk' SQL Injection

!/usr/bin/perl -w iTechscripts Freelancer Script v5.11 sk SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 11-2017 GMT +7:00 Jakarta, Indonesia Software : Freelancer Script Version : 5.11 Lower versions may also be affected Price : US$199.00 Link :...

freelancer-info NSE Script

Detects the Freelancer game server FLServer.exe service by sending a status query UDP probe. When run as a version detection script -sV, the script will report on the server name, current number of players, maximum number of players, and whether it has a password set. When run explicitly --script...

CVE-2011-5109

Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to 1 categorylist.php, 2 Copyofcalendarlist.php, 3 customerstatisticslist.php, 4 customerlist.php, and 5...

CVE-2011-5109

Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to 1 categorylist.php, 2 Copyofcalendarlist.php, 3 customerstatisticslist.php, 4 customerlist.php, and 5...

Sql injection

Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to 1 categorylist.php, 2 Copyofcalendarlist.php, 3 customerstatisticslist.php, 4 customerlist.php, and 5...

CVE-2011-5109

CVE-2011-5109 describes multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_s...

CVE-2011-5109

Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to 1 categorylist.php, 2 Copyofcalendarlist.php, 3 customerstatisticslist.php, 4 customerlist.php, and 5...

Advanced POWER PACKED Freelancers CSRF

Exploit for php platform in category web applications Exploit Title: Advanced POWER PACKED Freelancers CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/advanced-power-packed-freelancers-script-php/22749/ Category:: webapps Demo :...

Freelancer Kit v2.35 - Multiple Web Vulnerabilities

Document Title: =============== Freelancer Kit v2.35 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=402 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 402...

Freelancer Kit v2.35 - Multiple Web Vulnerabilities

Document Title: =============== Freelancer Kit v2.35 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=402 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 402...

Freelancer calendar <= 1.01 SQL Injection Vulnerability

Dear all, I have found multiple a SQL injection vulnerability in Freelancer calendar = 1.01. It seems to be version 1.01 as you can see in the 'Files' section of the Sourceforge page. I reported the vulnerability to the vendor but no response as stated in the advisory. Best, muuratsalo -- ADVISOR...