Word Directory Script 2.1 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Word Directory Script v 2.1 - Cross Site Scripting / SQL Injection Credit: Bilal KARDADOU Vendor: http://www.phponly.com/ Vendor URL: http://www.phponly.com/words.html Product: Word Directory Script v 2.1 Google Dork: N/A Product &...

Word Directory Script 2.1 Cross Site Scripting / SQL Injection

Title: Word Directory Script v 2.1 - Cross Site Scripting / SQL Injection Credit: Bilal KARDADOU Vendor: http://www.phponly.com/ Vendor URL: http://www.phponly.com/words.html Product: Word Directory Script v 2.1 Google Dork: N/A Product & Service Introduction: "Word Directory Script" The big...

Multiple vulnerabilities in extension "Fe user statistic" (festat)

It has been discovered that the extension "Fe user statistic" festat is susceptible to Cross-Site Scripting, Insecure Unserialize and Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affecte...

Sql injection

SQL injection vulnerability in the FE user statistic festat extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4952

The CVE-2010-4952 issue affects the TYPO3 FE user statistics extension festat, vulnerable in versions before 0.2.4 due to an SQL injection flaw that allows remote attackers to execute arbitrary SQL via unspecified vectors. The vulnerability can impact confidentiality, integrity, and availability ...