CVE-2020-27848: Improper Neutralization of Special Elements used in an SQL Command

dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user mus...

NagiosXL 5.6.11 orderby SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Postauth SQL injection in NagiosXI 5.6.11 param: orderby Vendor: https://www.nagios.com/ Vulnerable software: https://www.nagios.com/downloads/nagios-xi/vmware/ Repo: https://github.com/c610/free/ email protected:$ cat n2.txt GET...

NagiosXL 5.6.11 orderby SQL Injection

Title: Postauth SQL injection in NagiosXI 5.6.11 param: orderby Date: 13.03.2020 Vendor: https://www.nagios.com/ Vulnerable software: https://www.nagios.com/downloads/nagios-xi/vmware/ Repo: https://github.com/c610/free/ c@kali:$ cat n2.txt GET...

CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

Sql injection

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

CVE-2020-9268

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

CVE-2020-9268

SOPlanning 1.45 is vulnerable to SQL Injection in the ORDER BY clause (projets.php?order=nom_createur&by= substring). Root cause: unsafe concatenation/handling of ORDER BY inputs enabling attacker-controlled data. Impact: information disclosure demonstrated in public reports; CVSS/metrics indicat...

CVE-2020-9268: Improper Neutralization of Special Elements used in an SQL Command

SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...

SOPlanning 1.45 - (by) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali...

SOPlanning 1.45 - 'by' SQL Injection

Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The SOPlanning application i...

SQL Injection

@azhou/basemodel is vulnerable to SQL injection. A remote attacker is able to inject and execute arbitrary SQL statements via the orderBy variable...

WordPress Core 5.2.3 - Viewing UnauthenticatedPasswordPrivate Posts

WordPress Core 5.2.3 - Viewing UnauthenticatedPasswordPrivate Posts So far we know that adding ?static=1 to a wordpress URL should leak its secret content Here are a few ways to manipulate the returned entries: - order with asc or desc - orderby - m with m=YYYY, m=YYYYMM or m=YYYYMMDD date format...

CVE-2019-15889

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter...

CVE-2019-15889

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter...

CVE-2019-15889

Summary: CVE-2019-15889 affects the WordPress Download Manager plugin prior to 2.9.94. The vulnerability is a cross-site scripting (XSS) flaw in the category shortcode feature, exploitable via the orderby or publish_date parameters (e.g., ?orderby=title,publish_date or similar). Impact (as stated...

PT-2019-14454

Name of the Vulnerable Software and Affected Versions WordPress download-manager plugin versions prior to 2.9.94 Description The issue concerns a problem with the category shortcode feature in the download-manager plugin, where an XSS attack can be performed. This is demonstrated through the...

CVE-2019-15889: Improper Neutralization of Input During Web Page Generation

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or searchpublishdate parameter...

PT-2019-18586

Name of the Vulnerable Software and Affected Versions ProfileDesign CMS version 6.0.2.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including page, gbs, side, id, imgid, cat, or orderby. This can lead to cross-site scripting XSS...

CVE-2019-7409: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page, 2 gbs, 3 side, 4 id, 5 imgid, 6 cat, or 7 orderby parameter...