CVE-2014-4938

The CVE-2014-4938 entry concerns the WordPress WP RSS Poster plugin version 1.0.0. A SQL injection flaw exists in the wrp-add-new page (wp-admin/admin.php) exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact includes typical web app con...

makit news/blog poster 3.1 - DB Download Vulnerability

No description provided by source...

Poster 2.0 Unauthorized Privileged User Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8426/info A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access this variable to...

WordPress WP RSS Poster Plugin - SQL Injection

This WordPress RSS Poster plugin's "wp-admin/admin.php" is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin WP Rss Poster - wp-adminadmin.php SQL Injection

WordPress Plugin WP Rss Poster - wp-adminadmin.php SQL Injection source: https://www.securityfocus.com/bid/68557/info WP Rss Poster plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to...

WordPress Plugin WP Rss Poster - '/wp-admin/admin.php' SQL Injection

source: https://www.securityfocus.com/bid/68557/info WP Rss Poster plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application, access or modify data, or exploit...

Poster Software PUBLISH-iT PUI File Processing Buffer Overflow (CVE-2014-0980)

A stack buffer overflow vulnerability exists in Poster Software PUBLISH-iT. The vulnerability is due to insufficient validation on the length of entry names in a "styl" record when processing PUI files. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a...

CVE-2014-0980

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

Buffer overflow

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

CVE-2014-0980

CVE-2014-0980 : A stack-based buffer overflow in Poster Software PUBLISH-iT 3.6d arises while processing .PUI files due to insufficient validation of the length of entry names in a “styl” record. This leads to remote code execution when a user opens a crafted PUI file. Public material confirms th...

CVE-2014-0980

Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file...

ThinkSNS 一处越权操作

简要描述： 越权 详细说明： 登录后到招贴板： http://t.thinksns.com/app/poster 可见到每一个帖子URL后面的ID http://t.thinksns.com/app/poster/edit/我是ID?typeId=1 除了可以修改自己发的贴 还可以修改其他用户的帖子 漏洞证明： 例如：http://t.thinksns.com/app/poster/edit/516?typeId=1 成功修改帖子...

Yahoo Answer Wordpress Auto Poster Cross Site Scripting

Exploit Title: Yahoo Answer Wordpress Auto PosterPlugin "3 OR "alertdocument.cookie Dem0 : http://www.tryscripts.org/wordpress/yahoo/ FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4 Crew,C4,T3D Hackers,...

Discuz!NT 2.x - 3.5.2 SQL注入

简要描述： Discuz!NT 是康盛创想Comsenz旗下的一款功能强大的基于 ASP.NET 平台的社区软件。 详细说明： ajaxtopicinfo.ascx用户控件 poster SQL注入漏洞 漏洞证明： 文件 admin/UserControls/ ajaxtopicinfo.ascx 中 转到函数 GetCondition WebsiteManage.cs //62 行 if posterlist != "" string poster = posterlist.Split','; condition += " AND poster in "; string...

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

ASP Makit News/Blog Poster 3.1 Database Disclosure

======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

makit news/blog poster v3.1 DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi...

makit newsblog poster 3.1 - Database Disclosure

makit newsblog poster 3.1 - Database Disclosure ======================================================================================== | Title : Asp makit news/blog poster v3.1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - O...

makit news/blog poster v3.1 DB Download Vulnerability

Exploit for unknown platform in category web applications ===================================================== makit news/blog poster v3.1 DB Download Vulnerability =====================================================...

CVE-2009-2786

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter...