Slideshow: Scenes from S4 2012

VIEW SLIDESHOW Scenes from S4 2012 S4 is a conference hosted by Digital Bond, a security consulting firm based in Sunrise, Florida. Now in its fifth year, the S4 draws some of the world’s top experts in securing industrial control systems to sunny Miami Beach to discuss the state of the art. Here...

Slideshow: Threatpost Top Security News Stories of 2011

VIEW SLIDESHOW Threatpost Top Security News Stories of 2011 We’ve compiled our list of the Top Security Stories of 2011, presented here in no particular order. These are the issues that shook the world’s markets and kept us awake at night. If there’s a lesson here, it’s that cybersecurity...

CVE-2010-5002

Cross-site scripting XSS vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter...

CVE-2010-5002

Cross-site scripting XSS vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter...

WordPress Plugin timthumb.php Shell Upload

Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the timthumb.php library. By hosting a malicious GIF file...

Multiple WordPress Plugins - 'timthumb.php' File Upload

Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the timthumb.php library. By hosting a malicious GIF file...

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

WordPress Plugin Image Gallery with Slideshow <= 1.5 - Multiple Vulnerabilities

Multiple vulnerabilities found in WordPress Plugin Image Gallery with Slideshow version 1.5 and earlier versions. Solution Upgrade the plugin...

WordPress Image Gallery With Slideshow 1.5 SQL Injection / Shell Upload

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

Wordpress Image Gallery with Slideshow plugin <= 1.5 Vulnerabilities

Exploit for php platform in category web applications Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

Plugin for WordPress SH Slideshow <= 3.1.4 SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: WordPress SH Slideshow plugin Affected version: 3.1.4 tested --------------- Test method --------------- /wp-content/plugins/sh-slideshow/ajax.php id=-1 AND 1=IF21,BENCHMARK5 0 0 0 0 0 0,MD5CHAR115,113,108,109,97,112,0--%2 0 --------------- Defect code analysis --------------- $result =...

WordPress SH Slideshow Plugin <= 3.1.4 - SQL Injection

SH Slideshow plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id';...

WordPress SH Slideshow plugin <= 3.1.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id'; 0day.today 2018-04-10...

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection

Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id';...

Joomla! Component com_xeslidegalfx - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48981/info The 'Slideshow Gallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

YaPiG 0.95 Cross Site Scripting

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

Movavi VideoSuite 8.0 Buffer Overflow

!/usr/bin/perl Title : MovaviVideoSuite8.0 'Create SlideShow' Buffer Overflow Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans Tested on : windows XP SP3 Français & Arabic Target : Movavi Video Suite 8.0 Note : Thi...

WordPress Feature Slideshow 1.0.6-beta Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Feature Slideshow 1.0.6-beta Vulnerability...........Reflected Cross-site Scripting Download................http://sleek.no/kunder/138 Release Date............1/24/2011 Tested...