CVE-2019-8360

Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...

CVE-2019-8360

Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data2.php cate parameter...

CVE-2019-8360

CVE-2019-8360 affects Themerig Find a Place CMS Directory 1.5. The connected sources describe an SQL injection vulnerability in the file path find/assets/external/data_2.php through the cate parameter. Root cause per CNVD: lack of validation of externally entered SQL statements in database-based ...

Find A Place CMS Directory 1.5 SQL Injection

Exploit Title: Find a Place CMS Directory 1.5 - 'assets/external/data2.php cate' SQL Injection Google Dork: inurl:"assets/external/data.php" Date: 14 Feb 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://themerig.com/...

CVE-2018-16455

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

CVE-2018-16455

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

Cross site scripting

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

CVE-2018-16455

PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword...

CVE-2018-16455

CVE-2018-16455 affects PHP Scripts Mall Market Place Script 1.0.1 and is described as a stored XSS via a keyword. The root cause is insufficient sanitization/validation of user-supplied keywords. Remediation: upgrade to a version that includes a fix or apply input validation/sanitization to preve...

PT-2018-13580 · Php Scripts Mall · Php Scripts Mall Market Place Script

Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Market Place Script version 1.0.1 Description: The issue allows for cross-site scripting XSS attacks via a keyword. Recommendations: For PHP Scripts Mall Market Place Script version 1.0.1, update the script to a version that...

place-it.dk XSS vulnerability

Open Bug Bounty ID: OBB-681118 Description| Value ---|--- Affected Website:| place-it.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-11567

Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still...

Carbon Black: A “Great Place to Work”

I am excited to announce Carbon Black has been certified as a “Great Place to Work” by the Great Place to Work Institute. It’s Carbon Black’s first such accolade on a national level and speaks volumes for our nearly 1,000 employees worldwide who come to work every day to create a world safe from...

Facebook Graph Metadata Crosswalk Mapping Proof Of Concept

!/usr/bin/perl Facebook 'Graph' metadata crosswalk mapping PoC 2018 Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Description: Criminal hacker CRACKER can take advantage of this weakness by creating a specialized database to manipulate facebook users with fake news...

IBM Sametime Detection

Detection of IBM Sametime. The script sends a connection request to the server and attempts to detect IBM Sametime. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Place Life Travel Photography Software Android App Has Logic Flaw Vulnerability

Place is a photo socialization software based on location tagging. Place life travel photography software Android APP has a brute force vulnerability that can be exploited by attackers to blast account password information...

akurat.co XSS vulnerability

Open Bug Bounty ID: OBB-519668 Description| Value ---|--- Affected Website:| akurat.co Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure...

FLARE IDA Pro Script Series: Simplifying Graphs in IDA

Introduction We’re proud to release a new plug-in for IDA Pro users – SimplifyGraph – to help automate creation of groups of nodes in the IDA’s disassembly graph view. Code and binaries are available from the FireEye GitHub repo. Prior to this release we submitted it in the 2017 Hex-Rays plugin...

culture.place XSS vulnerability

Vulnerable URL: http://culture.place/coursedetails.php?id=13'"69 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7049846 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

ShopsN v3.0 SQL Injection Vulnerability in Frontend SpecialBusinessController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 beta3 version SpecialBusinessController.class.php file contains a SQL injection vulnerability due to the system fails to effectively filter the placeorder function. A remote attacker can exploit the vulnerability to obtain sensitive...