blogVault 1.40-1.44 - Unauthenticated PHP Object Injection

The Backup & Staging – BlogVault Backups WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...

CVE-2016-4010

CVE-2016-4010 affects Magento CE/EE before 2.0.6 and enables unauthenticated remote code execution via crafted serialized shopping cart data, due to a PHP object injection in the checkout/cart flow. OpenVAS and exploit references describe Magento

phpok framework/model/wealth. php injection

No description provided by source...

CubeCart 6.0.10 - Multiple Vulnerabilities

Exploit for php platform in category web applications Product: CubeCart Vendor: CubeCart Limited Vulnerable Versions: 6.0.10 and probably prior Tested Version: 6.0.10 Advisory Publication: March 2, 2016 without technical details Vendor Notification: March 2, 2016 Vendor Patch: March 16, 2016 Publ...

Invision Power Board 4.x.x Uploading Shell Exploit

Uploading Shell Using PHP Injection Vulnerability This is private exploit. You can buy it at https://0day.today...

SO Planning 1.32 - Multiple Vulnerabilities

SO Planning 1.32 - Multiple Vulnerabilities SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and...

CVE-2014-8877 - Code Injection in Wordpress CM Download Manager plugin

Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product: https://wordpress.org/plugins/cm-download-manager/ Affected version: 2.0.0 and previous version Fixed version:...

Zikula Application Framework 1.3.6 Multiple PHP Object Injection Vulnerabilities

Exploit for php platform in category web applications Zikula Application Framework = 1.3.6 Multiple PHP Object Injection Vulnerabilities • Software Link: http://zikula.org/ • Affected Versions: Version 1.3.6 and probably prior versions. • Vulnerabilities Description: 1 Input passed via the...

PHPMyWind 5.1 /include/common.func.php 代码执行漏洞

/include/common.func.php/字符串转数组/ if!functionexists'String2Array' function String2Array$data if$data == '' return array; @eval"$array = $data;"; return $array; $data变量进入eval执行，当传入$data为：111|222$phpinfo执行的PHP语句为：@eval"$array = array"1"="111|222$phpinfo","2"="";;"页面返回：...

Drupal HTTP Parameter Key/Value SQL Injection

This module exploits the Drupal HTTP Parameter Key/Value SQL Injection aka Drupageddon in order to achieve a remote shell on the vulnerable instance. This module was tested against Drupal 7.0 and 7.31 was fixed in 7.32. Two methods are available to trigger the PHP payload on the target: - set...

HybridAuth 2.2.2 - Remote Code Execution

No description provided by source. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.2.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates : August 5, 2014...

WordPress plug-in MailPoet memory vulnerabilities or cause the website to be black-and-vulnerability warning-the black bar safety net

7 in early May, according to security company Sucuri research report, downloaded over 1 7 0 million WordPress plug-in MailPoet was traced to the presence of security risks, may result in the site more likely to be a hacker hijacked, according to its indicates, is black the website is still growin...

Sphider Search Engine - Multiple Vulnerabilities

Exploit for php platform in category web applications 1. patched April 2013, in all versions before 1.3.6 for sphider, 3.2 for sphider-pro, and 3.2 for sphider-plus, existed an auth bypass in auth.php, the fix for this was adding an exit;. before that anyone could simply send credentials that wou...

Sphider Search Engine 1.3.6 - Multiple Vulnerabilities

Sphider Search Engine 1.3.6 - Multiple Vulnerabilities Exploit Title: Sphider 1.3.6 or later SQL Injection Google Dork: intitle:"Sphider Admin Login" Date: 1 July 2014 Exploit Author: Mike Manzotti Vendor Homepage: http://www.sphider.eu/ Software Link: http://www.sphider.eu/sphider-1.3.6.zip...

Sphider Search Engine 1.3.6 - Multiple Vulnerabilities

Exploit Title: Sphider 1.3.6 or later SQL Injection Google Dork: intitle:"Sphider Admin Login" Date: 1 July 2014 Exploit Author: Mike Manzotti Vendor Homepage: http://www.sphider.eu/ Software Link: http://www.sphider.eu/sphider-1.3.6.zip Version: v 1.3.6 Description: The web application is...

WikkaWiki 1.3.2 Spam Logging PHP Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

MySimpleNews 1.0 PHP Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5865/info MySimpleNews allows users to enter news articles through a web interface. It will allow PHP code to be injected into URI parameters of the 'users.php' script, which will be stored into a MySimpleNews file...

al3jeb script Remote Login Bypass Exploit

No description provided by source. '/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r cr4wl3r!linuxmail.org ! Date: 19.01.201...

Drupal <= 4.5.3 & <= 4.6.1 Comments PHP Injection Exploit

No description provided by source. !/usr/bin/perl Mon Jul 4 18:19:35 CEST 2005 [email protected] DRUPAL-SA-2005-002 php injection in comments yes, its lame Hax0r code here, read before execute Run without arguments to show the help. BLINK! BLINK! BLINK! BLINK! Feel free to port to another stupid...

miniBB keyword_replacer <= 1.0 (pathToFiles) File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian...