WordPress IP Logger Plugin map-details.php SQL Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress IP-Logger Plugin <= 3.0 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...

WordPress Plugin IP-Logger 3.0 - SQL Injection

Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...

WordPress IP-Logger Plugin <= 3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0...

WordPress IP-Logger 3.0 SQL Injection

Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...

WordPress IP Logger Plugin <= 3.0 - SQL Injection

This WordPress IP Logger plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin IP-Logger 3.0 - SQL Injection

WordPress Plugin IP-Logger 3.0 - SQL Injection Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested ---...

SA-CONTRIB-2011-032 - Mail Logger - Cross Site Scripting

The Mail Logger module logs all outgoing e-mails and provides users with the "access mail logger" permission to view logged e-mails. The module does not sanitize the log output of addressee information, subject, and body, leading to a Cross-Site Scripting XSS vulnerability that may lead to a...

JVN#99175647: Virus Buster 2009 key input encryption function vulnerability

The key input encryption function in Virus Buster 2009 contains a vulnerability where a portion of password that is entered in the web browser is not properly encrypted. Impact When input information is stolen by a key logger, portions of the information may be leaked in plaintext. Solution Updat...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

CVE-2010-2146

CVE-2010-2146 concerns a PHP remote file inclusion in the Visitor Logger’s banned.php, allowing an attacker to cause arbitrary PHP code execution by supplying a URL in the VL_include_path parameter. Documents consistently identify the underlying issue as a PHP RFI and name the affected component ...

CVE-2010-2146: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

Visitor Logger Remote File Inclusion

Visitor Logger banned.php Remote File Include Vulnerability - Date: 2010/05/31 - Vendor: http://www.graviton-mediatech.com - Download: http://www.graviton-mediatech.com/downloads/Visitor-Logger/Visitor-Logger.zip - Googledork: n/a - Discovered by bd0rk - Contact: bd0rkatschool-of-hack.net or...

Visitor Logger - 'banned.php' Remote File Inclusion

Visitor Logger banned.php Remote File Include Vulnerability - Date: 2010/05/31 - Vendor: http://www.graviton-mediatech.com - Download: http://www.graviton-mediatech.com/downloads/Visitor-Logger/Visitor-Logger.zip - Googledork: n/a - Discovered by bd0rk - Contact: bd0rkatschool-of-hack.net or...

Visitor Logger - banned.php Remote File Inclusion

Visitor Logger - banned.php Remote File Inclusion - Visitor Logger banned.php Remote File Include Vulnerability - Date: 2010/05/31 - Vendor: http://www.graviton-mediatech.com - Download: http://www.graviton-mediatech.com/downloads/Visitor-Logger/Visitor-Logger.zip - Googledork: n/a - Discovered b...

Visitor Logger (banned.php) Remote File Include Vulnerability

Exploit for php platform in category web applications ============================================================= Visitor Logger banned.php Remote File Include Vulnerability ============================================================= - Visitor Logger banned.php Remote File Include Vulnerabili...

OpenJDK UI logging information leakage(6664512)

The Abstract Window Toolkit AWT in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the...

Click Logger

Added: 09/30/2009 Background This tool runs an exploit server which simply returns an error page and logs which users visited it. It can be used to find out which users were susceptible to clicking on the link in an e-mail message. Limitations The target must be present in the license key but is...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...