CVE-2017-6573

A concrete SQL injection in the WordPress Mail Masta plugin (version 1.0) affecting the file ./inc/lists/edit-list.php via the GET parameter id. Exploitation appears to require WordPress admin access and could allow arbitrary SQL execution, with multiple external sources confirming the vulnerabil...

CVE-2017-6577

The CVE-2017-6577 entry describes a SQL injection vulnerability in the Mail Masta (mail-masta) WordPress plugin version 1.0. The flaw is exploitable via the POST parameter list_id in ./inc/subscriber_list.php, requiring WordPress admin access to exploit. Impact, per the CVSS data in the record, i...

CVE-2017-6571

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

CVE-2017-6572

CVE-2017-6572 affects the WordPress Mail Masta (mail-masta) plugin version 1.0. The vulnerability is in ./inc/lists/add_member.php via the GET parameter filter_list, enabling SQL injection. Multiple connected sources (CNVD, CVE records, WPVulnDB) corroborate a SQL injection vulnerability exploita...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

CVE-2017-6578

CVE-2017-6578 is a SQL injection vulnerability in the WordPress Mail Masta (mail-masta) plugin version 1.0. The issue impacts the plugin’s file ./inc/subscriber_list.php via the POST parameter subscriber_email, potentially enabling arbitrary SQL execution with WordPress admin access. Documented a...

CVE-2017-6576

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/campaign-delete.php with the GET Parameter: id...

CVE-2017-6574

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6575

The CVE-2017-6575 entry maps to a concrete SQL injection vulnerability in the WordPress Mail Masta (aka mail-masta) plugin v1.0. The flaw exists in the file ./inc/lists/edit_member.php and is triggered via the GET parameter member_id, allowing an attacker with WordPress admin access to inject arb...

CVE-2017-6574

The CVE-2017-6574 entry affects the Mail Masta (mail-masta) WordPress plugin v1.0. The vulnerability is a SQL injection in the code path ./inc/lists/edit_member.php with the GET parameter filter_list, exploitable from WordPress admin context. Impact described as arbitrary SQL execution with high ...

CVE-2017-6576

CVE-2017-6576 : The WordPress Mail Masta (aka mail-masta) plugin version 1.0 is vulnerable to a SQL injection in ./inc/campaign/campaign-delete.php via the GET parameter id. Attacker with WordPress admin access can exploit this to execute arbitrary SQL commands. Public sources (CNVD/NVD) confirm ...

CVE-2017-6573

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id...

CVE-2017-6571

The CVE-2017-6571 entry concerns a SQL injection in the WordPress Mail Masta (mail-masta) plugin v1.0. The vulnerability is triggered in ./inc/campaign/view-campaign.php via the GET parameter id, potentially exposing the database to arbitrary SQL commands when the attacker has WordPress admin acc...

CVE-2017-6572

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/addmember.php with the GET Parameter: filterlist...

Country on Sale Script - SQL Injection

Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo: http://www.websitescripts.org/demo/countryonsalescript/ Version:...

Suspicious Metadata Mail Phishing Redirection

Mail attachment containing a malicious html file was observed as part of recent campaigns. A remote attacker could send spam e-mails including those html and redirects users to manually download malicious files...

Matrimonial Script 3.0 SQL Injection

Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo: http://74.124.215.220/matriialscrip/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64...

Schools Alert Management Script 2.01 - list_id SQL Injection

Schools Alert Management Script 2.01 - listid SQL Injection Exploit Title: Schools Alert Management Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/schools-alert-management-system/ Demo...

Advanced Matrimonial Script 2.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advanced Matrimonial Script v2.0.3 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/advanced-matrimonial/ Demo:...

Responsive Matrimonial Script 4.0.1 - SQL Injection

Responsive Matrimonial Script 4.0.1 - SQL Injection Exploit Title: Responsive Matrimonial Script v4.0.1 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/responsive-matrimonial/ Demo:...