Sql injection

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2014-100011

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2014-100011

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2014-100012

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

CVE-2014-100011

CVE-2014-100011 is a SQL injection vulnerability in Sendy 1.1.9.1 affecting the /send-to endpoint via the c parameter. Root cause: improper handling of user input enabling arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL; CVSS 2.0 base score 7.5 (HIGH) with network attack...

CVE-2014-100012

The CVE-2014-100012 entry describes a SQL injection vulnerability in Sendy 1.1.8.4, exploitable via the i parameter in /app, enabling remote attackers to run arbitrary SQL commands. Affected component: Sendy web app (path /app). Root cause: improper input handling leading to SQL injection. Impact...

Sendy 1.1.9.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: marduk369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 root@kali: sqlmap -u 'http://server1/send-to?i=1&c=10'...

Sendy 1.1.8.4 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Sendy SqlInject Date: 2014-02-24 Exploit Author: Hurley Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.8.4 Demo page:...

Sendy 1.1.9.1 - SQL Injection Vulnerability

Sendy contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the /send-to script not properly sanitizing user-supplied input to the "c" parameter. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the...

Sendy '/send-to' SQL注入漏洞

Bugtraq ID:66771 Sendy是一款基于WEB的应用。 Sendy '/send-to'存在SQL注入漏洞，允许攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Sendy 1.1.9.1 目前没有详细解决方案： http://sendy.co/...

Sendy 1.1.9.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: marduk369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 email protected: sqlmap -u 'http://server1/send-to?i=1&c=1...

Sendy 1.1.9.1 - SQL Injection

Sendy 1.1.9.1 - SQL Injection Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: marduk369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 root@kali: sqlmap -u 'http://server1/send-to?i=1&c=10' --cookie="version=1.1.9.1;...

Sendy 1.1.9.1 - SQL Injection

Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: marduk369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 root@kali: sqlmap -u 'http://server1/send-to?i=1&c=10' --cookie="version=1.1.9.1; PHPSESSID=phpsessid value;...

Sendy 1.1.9.1 SQL Injection

Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: necro369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 root@kali: sqlmap -u 'http://server1/send-to?i=1&c=10' --cookie="version=1.1.9.1; PHPSESSID=phpsessid value;...

Sendy 'i' SQL注入漏洞

Bugtraq ID:65772 Sendy是一款自托管的电子邮件通讯应用。 应用对用户通过'i'提交的参数缺少充分过滤，允许攻击者利用漏洞进行SQL注入攻击，可获得敏感数据库信息或控制应用系统。 0 Sendy 1.1.8.4 目前没有详细解决方案提供： http://sendy.co http://www.example.com/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

Sendy 1.1.8.4 SQL Injection

Exploit Title: Sendy SqlInject Date: 2014-02-24 Exploit Author: Hurley Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.8.4 Demo page: http://server/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

Sendy 1.1.8.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sendy SqlInject Date: 2014-02-24 Exploit Author: Hurley Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.8.4 Demo page:...

Sendy 1.1.8.4 - SQL Injection

Exploit Title: Sendy SqlInject Date: 2014-02-24 Exploit Author: Hurley Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.8.4 Demo page: http://server/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

Sendy 1.1.8.4 - SQL Injection

Sendy 1.1.8.4 - SQL Injection Exploit Title: Sendy SqlInject Date: 2014-02-24 Exploit Author: Hurley Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.8.4 Demo page: http://server/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,2...