Wordpress NEX-Forms 3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : NEX-Forms 3.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage :...

NEX-Forms - Ultimate Form builder <= 3.0 - SQL Injection

The NEX-Forms – Ultimate Form Builder – Contact forms and much more WordPress plugin was affected by an Ultimate Form builder = 3.0 - SQL Injection security vulnerability...

WordPress NEX-Forms <= 2.9 - SQL Injection

This WordPress NEX-Forms plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin NEX-Forms < 3.0 - SQL Injection

Exploit Title : NEX-Forms 3.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage : https://wordpress.org/plugins/nex-forms-express-wp-form-builder/ Software Link :...

WordPress NEX-Forms Lite Plugin <= 2.1.0 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "formfields" parameter. Solution Update the plugin...

iGaming CMS 1.5 - CSRF Vulnerability

No description provided by source. NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF vulnerability in...

Dlili Script SQL Injection Vulnerability

No description provided by source. ============================================================================== Remote SQL Injection Vulnerability ============================================================================== + Published: 2010-02-02 + Script: dlili + Script site:...

Joomla! Component com_question - SQL Injection

|Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : | http://localhost/Joomla/index.php/?option=comquestion&catID=SQL |...

PHPCMS 2008 SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...

Almnzm 2.1 SQL Injection

Title: almnzm 2.1 1 Vulnerability Type = SQL Injection Example URL = index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concatusername,0x3a,password,4,5,6,7 from almnzmcustomers--%20 - Demo Live: http://www.ksa-servers.com/index.php?a=pages&id=3' and 1=0 UnIon aLL Select...

Almnzm 2.1 - SQL Injection

Title: almnzm 2.1 1 Vulnerability Type = SQL Injection Example URL = index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concatusername,0x3a,password,4,5,6,7 from almnzmcustomers--%20 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Dlili Remote SQL Injection

============================================================================== Remote SQL Injection Vulnerability ============================================================================== + Published: 2010-02-02 + Script: dlili + Script site: http://www.dlili.com + Author: Dr.DaShEr...

iGaming CMS 1.5 - Cross-Site Request Forgery

iGaming CMS 1.5 - Cross-Site Request Forgery NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF...

iGaming CMS v1.5 CSRF Vulnerability

No description provided by source. NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF vulnerability in...

iGaming CMS v1.5 CSRF Vulnerability

Exploit for unknown platform in category web applications =================================== iGaming CMS v1.5 CSRF Vulnerability =================================== NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative...

allomani 2007 - cat SQL Injection

allomani 2007 - cat SQL Injection ================== NaMe: allomani 2007 = SQL Injection Vulnerability Author : NeX HackEr Contact: [email protected] ================== Script site : http://allomani.com ================== ExplOiT: UserName http://www.xxx.com/path/index.php?action=browse&cat=-1 and...

allomani 2007 (cat) Remote SQL Injection Vulnerability

No description provided by source. ================== NaMe: allomani 2007 = SQL Injection Vulnerability Author : NeX HackEr Contact: [email protected] ================== Script site : http://allomani.com ================== ExplOiT: UserName http://www.xxx.com/path/index.php?action=browse&cat=-1 and...

allomani 2007 - 'cat' SQL Injection

================== NaMe: allomani 2007 = SQL Injection Vulnerability Author : NeX HackEr Contact: [email protected] ================== Script site : http://allomani.com ================== ExplOiT: UserName http://www.xxx.com/path/index.php?action=browse&cat=-1 and 1=0 UNION AlL SELECT username,2,3...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability ========================================================== ================== NaMe: Ultimate Fade-in slideshow 1.51 = She...

Unfixed XSS vulnerability at milworm.com

Security researcher NeX, has submitted on 07/05/2009 a cross-site-scripting XSS vulnerability affecting milworm.com, which at the time of submission ranked 1600201 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/05/2009. It is currently...