Sql injection

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6573

A concrete SQL injection in the WordPress Mail Masta plugin (version 1.0) affecting the file ./inc/lists/edit-list.php via the GET parameter id. Exploitation appears to require WordPress admin access and could allow arbitrary SQL execution, with multiple external sources confirming the vulnerabil...

CVE-2017-6577

The CVE-2017-6577 entry describes a SQL injection vulnerability in the Mail Masta (mail-masta) WordPress plugin version 1.0. The flaw is exploitable via the POST parameter list_id in ./inc/subscriber_list.php, requiring WordPress admin access to exploit. Impact, per the CVSS data in the record, i...

CVE-2017-6570

CVE-2017-6570 : Concrete details show a SQL injection in the WordPress plugin Mail Masta (aka mail-masta) version 1.0. The vulnerable component is the file ./inc/campaign/view-campaign-list.php, exploitable via the GET parameter id. Public records indicate an attacker with WordPress admin access ...

CVE-2017-6572

CVE-2017-6572 affects the WordPress Mail Masta (mail-masta) plugin version 1.0. The vulnerability is in ./inc/lists/add_member.php via the GET parameter filter_list, enabling SQL injection. Multiple connected sources (CNVD, CVE records, WPVulnDB) corroborate a SQL injection vulnerability exploita...

CVE-2017-6578

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6570

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Parameter: id...

CVE-2017-6571

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6575

The CVE-2017-6575 entry maps to a concrete SQL injection vulnerability in the WordPress Mail Masta (aka mail-masta) plugin v1.0. The flaw exists in the file ./inc/lists/edit_member.php and is triggered via the GET parameter member_id, allowing an attacker with WordPress admin access to inject arb...

CVE-2017-6578

CVE-2017-6578 is a SQL injection vulnerability in the WordPress Mail Masta (mail-masta) plugin version 1.0. The issue impacts the plugin’s file ./inc/subscriber_list.php via the POST parameter subscriber_email, potentially enabling arbitrary SQL execution with WordPress admin access. Documented a...

CVE-2017-6576

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2017-6574

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6573

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id...

CVE-2017-6572

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/addmember.php with the GET Parameter: filterlist...

CVE-2017-6571

The CVE-2017-6571 entry concerns a SQL injection in the WordPress Mail Masta (mail-masta) plugin v1.0. The vulnerability is triggered in ./inc/campaign/view-campaign.php via the GET parameter id, potentially exposing the database to arbitrary SQL commands when the attacker has WordPress admin acc...

CVE-2017-6576

CVE-2017-6576 : The WordPress Mail Masta (aka mail-masta) plugin version 1.0 is vulnerable to a SQL injection in ./inc/campaign/campaign-delete.php via the GET parameter id. Attacker with WordPress admin access can exploit this to execute arbitrary SQL commands. Public sources (CNVD/NVD) confirm ...

CVE-2017-6574

The CVE-2017-6574 entry affects the Mail Masta (mail-masta) WordPress plugin v1.0. The vulnerability is a SQL injection in the code path ./inc/lists/edit_member.php with the GET parameter filter_list, exploitable from WordPress admin context. Impact described as arbitrary SQL execution with high ...

Country on Sale Script - SQL Injection

Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo: http://www.websitescripts.org/demo/countryonsalescript/ Version:...