937 matches found
Lessons Learned from the Equifax Disaster
143 million U.S. consumers, Equifax.com users who may have been affected by the the worst data breach in history are receiving all sorts of advice including a free TrustedID product license from Equifax. But despite numerous public reports about the incident, there are still many important...
Friends in War Make or Break 1.7 - imgid SQL Injection
Friends in War Make or Break 1.7 - imgid SQL Injection Exploit : Make or Break 1.7 imgid SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 09-2017 GMT +7:00 Jakarta, Indonesia Software : Make or Break Version : 1.7 Lower versions may also be affected Licens...
Ahrare Andeysheh CMS - Multiple Web Vulnerabilities
Document Title: =============== Ahrare Andeysheh CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1827 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1827...
Redaxo CMS 5.0.0 Cross Site Scripting / SQL Injection
=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-18 === Redaxo CMS contains multiple vulnerabilities ------------------------------------------------------------- Problem Overview ================ Technical Risk: high Likelihood of Exploitation: medium Vendor:...
SQL Injection in SocialEngine
High-Tech Bridge Security Research Lab discovered SQL-Injection vulnerability in a popular social networking software SocialEngine. The vulnerability can be exploited to gain access to potentially sensitive information in database and compromise the entire website. The vulnerability exists due to...
HumHub 0.11.20.20.0-beta.2 - SQL Injection
HumHub 0.11.20.20.0-beta.2 - SQL Injection === LSE Leading Security Experts GmbH - Security Advisory 2015-10-14 === HumHub - SQL-Injection ------------------------------------------------------------------------ Tested Versions =============== HumHub 0.11.2 and 0.20.0-beta.2 Issue Overview...
FeedWordPress <= 2015.0426 - XSS & SQL-Injection
The FeedWordPress WordPress plugin was affected by a XSS & SQL-Injection security vulnerability...
MyBB < 1.8.3 / 1.6.16 Multiple Vulnerabilities
Binary data 8612.prm...
ThinkSNS SQL注射一枚(无视WAF)
简要描述： 开发时候发现的。 详细说明： apps/page/Lib/Action/DiyAction.class.php 192行： public function doCopyTemplate $id = intval $POST 'id' ; $page = $POST 'page'; $channel = $POST 'channel'; $databaseData = D 'Page' -getPageInfo $page, $channel ; $result = $this-checkRole $databaseData 'manager', $databaseData ;...
Discuz! 7.x csrf+存储xss(富文本)脱裤(2处)和后台sql(root getshell)(附带exploit)
简要描述： Discuz! 7.x csrf xss富文本脱裤和后台sqlroot getshell,这回个真的给你们发一个实实在在的xss,美包包！！！，求加精！ 详细说明： 今天审核了一下dz 7系列的内容，发现富文本一处代码，可绕过进行xss 首先我们看一下这个富文本绕过，直接看代码： diszuscode.func.php:305-317: function parseaudio$url, $width = 400, $autostart = 0 $ext = strtolowersubstrstrrchr$url, '.', 1, 5; switch$ext case 'mp3...
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
source: https://www.securityfocus.com/bid/69303/info ManageEngine Password Manager Pro and ManageEngine IT360 are prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection
WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection source: https://www.securityfocus.com/bid/69181/info The GB Gallery Slideshow plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it i...
Fonality trixbox - index.php Remote Code Execution
Fonality trixbox - index.php Remote Code Execution source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...
Fonality trixbox - repo.php Directory Traversal
Fonality trixbox - repo.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...
Fonality trixbox - endpointcfg.php Directory Traversal
Fonality trixbox - endpointcfg.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting...
Fonality trixbox - 'endpointcfg.php' Directory Traversal
source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...
Fonality trixbox - asterisk_info.php Directory Traversal
Fonality trixbox - asteriskinfo.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting...
Fonality trixbox - 'index.php' Remote Code Execution
source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...
Fonality trixbox - index.php Directory Traversal
Fonality trixbox - index.php Directory Traversal source: https://www.securityfocus.com/bid/68719/info ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...
xClassified - ads.php SQL Injection
xClassified - ads.php SQL Injection source: https://www.securityfocus.com/bid/68438/info xClassified is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...