Lucene search
K

5 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

kitForm CRM Extension 0.43 (sorter.php, sorter_value param) - SQL Injection

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy easter.. Product: phpManufaktur / kitForm Version: = 0.43 2013-11-22 Date: 2014-04-20 Criticality: Medium Exploitable from: Remote Impact: SQL Injection Product URL: https://github.com/phpManufaktur/kitForm 1...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2014/05/15 2:0 p.m.13 views

CVE-2014-3757

SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch KIT module allows remote attackers to execute arbitrary SQL commands via the sortervalue parameter...

8.4AI score0.00421EPSS
Exploits1References2
CVE
CVE
added 2014/05/15 2:0 p.m.38 views

CVE-2014-3757

CVE-2014-3757 involves a SQL injection in sorter.php of the phpManufaktur kitForm extension (v0.43 and earlier) used with the KeepInTouch (KIT) module. The vulnerability arises from unsafely handling the sorter_value parameter, enabling remote attackers to forge and execute arbitrary SQL commands...

7.5CVSS8.7AI score0.00421EPSS
Exploits1References2Affected Software1
0day.today
0day.today
added 2014/04/23 12:0 a.m.17 views

kitForm CRM Extension 0.43 (sorter.php, sorter_value param) - SQL Injection

Exploit for php platform in category web applications -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy easter.. Product: phpManufaktur / kitForm Version: query$SQL; 3. Exploit 1. import httplib2, socks, urllib 2. 3. Change these values 4. t...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2014/04/21 12:0 a.m.18 views

kitForm 0.43 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy easter.. Product: phpManufaktur / kitForm Version: query$SQL; 3. Exploit 1. import httplib2, socks, urllib 2. 3. Change these values 4. target = "http://fbi.gov" 5. S...

7.4AI score
Exploits0
Rows per page
Query Builder