Classifieds Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Classifieds Script Script Buy Now:http://www.scriptfolder.com/scriptfolder-classifieds/ Author: Ihsan Sencan Author Web: http://ihsan.net...

Clone Of Oddee Script 1.1.3 SQL Injection

Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQ...

Vine VideoSite Creator Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihsan Senca...

Questions and Answers Script 1.1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Study Abroad Educational Website Script - SQL Injection

Study Abroad Educational Website Script - SQL Injection Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Study Abroad Educational Website Script Script Buy Now:...

School Management Software 2.75 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: School Management Software v2.75 - SQL Injection Web Vulnerability Google Dork: School Management Software Date:11.01.2017 Vendor Homepage: http://itechscripts.com/school-management-software/ Script Name: School Management...

Dating Script 3.25 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: Dating Script v3.25 - SQL Injection Date: 11.01.2017 Software link: http://itechscripts.com/dating-script/ Demo: http://dating.itechscripts.com Price: 199$ Category: webapps Exploit Author: Dawid Morawski Website:...

CVE-2016-6616

An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions prior to 4.6.4 and 4.4.x versions prior to 4.4.15.8 are affected...

MGASA-2016-0363 Updated php-adodb packages fix security vulnerabilities

The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting. CVE-2016-7405 Cross Site Scripting vulnerability in test script CVE-2016-4855...

CVE-2016-7919

Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. NOTE: the vendor disputes the relevance of this report, noting that "the person who i...

PowerCreator online teaching system /OpenPublicCourse. aspx the parameter cid sql injection vulnerability

No description provided by source...

JVN#92828286: Welcart vulnerable to SQL injection

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a SQL injection CWE-89 vulnerability due to the processing of changeSort parameter in admin.php. Impact An attacker that can log in to WordPress with this plugin enabled may obtain or alter...

Abandoned Cart Lite for WooCommerce < 1.9 - Authenticated Blind SQL Injection

The Abandoned Cart Lite for WooCommerce WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

CVE-2015-3427

Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ backslash in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422...

SourceBans <= 1.4.8 SQL/LFI Injection

No description provided by source...

Traidnt UP 2.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/ruby ============================================= Traidnt UP v2.0 Exploit SQL Injection Vulnerability --------------------------------------------- Date: 05-08-2009 Discovered & written by: Jafer Al-Zidjali Email: jaferatscorpionds.com Website:...

DZ Auktionshaus "V4.rgo" (id) news.php - SQL Injection Vulnerability

No description provided by source...

SWSoft Plesk <= 8.2 - login.php3 PLESKSESSID Cookie SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/25646/info Plesk is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromis...

FishCart 3.1 display.php psku Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13499/info FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit of the SQL-injection issues coul...

FunkyASP Glossary 1.0 Glossary.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...