WordPress Pay with Tweet Plugin <= 1.1 - Multiple Vulnerabilities

WordPress Pay with Tweet plugin is prone to a blind SQL injection and XSS vulnerabilities. Solution Update the plugin...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

Sql injection

SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-4846

CVE-2010-4846: A SQL injection vulnerability exists in view_item.php of MH Products Pay Pal Shop Digital, allowing remote attackers to execute arbitrary SQL commands through the ItemID parameter. The vulnerability affects the web application by inserting unvalidated input into a SQL query, enabli...

CVE-2010-4846

SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-4846: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

PT-2011-1781

Name of the Vulnerable Software and Affected Versions MH Products Pay Pal Shop Digital affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ItemID parameter in the "view item.php" file. Recommendations At the...

Harnig Botnet Returns, But Without Rustock

The takedown of the Rustock botnet earlier this year has had ripple effects throughout the malware and spam ecosystems, with some large reductions in spam levels and attacks. However, some of the components of the malware machine driven by Rustock are beginning to come back online now. Researcher...

Elizabeth Taylor's Death Triggers Spam Campaign

Yesterday we learned that Elizabeth Taylor, an American icon for some seven decades, died of congestive heart failure at 79. Today, Kaspersky Lab expert Dmitry Bestuzhev informs us that the news of her death is being exploited via social engineering scams on Twitter. The scam uses a shortened,...

Comriesoftware Pay Roll Time Sheet And Punch Card SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com...

Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass

Exploit for asp platform in category web applications ===================================================================== Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass =====================================================================...

Comrie Software Pay Roll Time Sheet Punch Card - Authentication Bypass

Comrie Software Pay Roll Time Sheet Punch Card - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor...

Comrie Software Pay Roll Time Sheet & Punch Card - Authentication Bypass

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com,...

SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure

The Sage Pay Direct Payment Gateway for Ubercart ucprotxvspdirect processes credit card transactions in Ubercart stores using the Sage Pay Direct service. The module may show remote 3-D Secure pages to the user in an iframe when their bank supports the Verified by Visa or MasterCard SecureCode...

CVE-2010-2256

Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...

CVE-2010-2257

SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in indexie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2257

Pay Per Minute Video Chat Script 2.0/2.1 suffers a SQL injection in index_ie.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE entry lists this vulnerability with a high base score (7.5) under NVD metrics. Exploitation details (specific proofs-of-con...