21 matches found
EUVD-2015-2323
Malware in sbrugna...
EUVD-2014-1047
Malware in sbrugna...
WordPress Photocrati Theme SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Photocrati is one of the photography themes. A SQL injection vulnerability exists in the ecomm-sizes.php script in...
CVE-2015-2216
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
Sql injection
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
CVE-2015-2216
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
CVE-2015-2216
The CVE-2015-2216 issue affects the Photocrati WordPress theme (version 4.x). A SQL injection in ecomm-sizes.php can be exploited via the prod_id parameter to execute arbitrary SQL commands. Public exploits exist for this vulnerability per Kaspersky’s advisories. Remediation: upgrade the Photocra...
CVE-2015-2216: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
PT-2015-5668
Name of the Vulnerable Software and Affected Versions Photocrati theme versions 4.x Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the prod id parameter in the ecomm-sizes.php file. Recommendations For Photocrati theme version 4.x, consider...
Photocrati Theme 4.x.x - SQL Injection
http://www.example.com/wp-content/themes/photocrati-theme-path/ecomm-sizes.php?prodid=SQL...
Photocrati Theme 4.x.x - SQL Injection
PoC http://www.example.com/wp-content/themes/photocrati-theme-path/ecomm-sizes.php?prodid=SQL...
WordPress Photocrati Theme 4.x.x SQL Injection
Exploit Title: wordpress theme photocrati 4.X.X SQL INJECTION Google Dork: Designed by Photocrati also powered by Photocrati Date: 23 / 09 / 2011 Exploit Author: ayastar Email : [email protected] Software Link: http://www.photocrati.com Version: 4.X.X Tested on: windows 7 -------- details |...
CVE-2014-100016
Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...
CVE-2014-100016
Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...
CVE-2014-100016: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...
PT-2015-3622
Name of the Vulnerable Software and Affected Versions Photocrati theme for WordPress affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the prod id parameter. Recommendations At the moment, ther...
WordPress Photocrati Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability
Exploit for php platform in category web applications Title : Wordpress Theme Photocrati-theme-v4.07 Shell Upload Vulnerability Author : Aloulou Date : 13/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.photocrati.com Google Dork...
WordPress Photocrati Cross Site Scripting
Exploit Title : Wordpress Photocrati-theme Cross Site Scripting Exploit Author : ACC3SS Vendor Homepage : http://www.photocrati.com Google Dork : inurl : inurl:wp-content/themes/photocrati-theme/photocrati-gallery Date : 2014-01-29 Tested on : Windows 7 Location :...