EUVD-2019-19899

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

CVE-2019-25576

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

CVE-2019-25576 Kepler Wallpaper Script 1.1 SQL Injection via category

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

CVE-2019-25576

CVE-2019-25576 affects Kepler Wallpaper Script 1.1 and is described as an SQL injection in the category parameter. An unauthenticated attacker can send GET requests with URL-encoded SQL UNION statements to retrieve data such as usernames, database names, and MySQL version details. The connected s...

PT-2026-26924

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

CVE-2019-25576: Improper Neutralization of Special Elements used in an SQL Command

Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to...

Kepler Wallpaper Script SQL注入漏洞

Kepler Wallpaper Script is a desktop wallpaper generation script developed by Kepler Wallpaper Inc. Version 1.1 of Kepler Wallpaper Script contains an SQL injection vulnerability. This vulnerability stems from the category parameter, which allows for SQL injections, potentially enabling...

EUVD-2013-7052

Malware in sbrugna...

Kepler Wallpaper Script 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://keplerwallpapers.online/ Software Link: https://codeclerks.com/PHP/1559/Kepler-Wallpaper-Script Version: 1.1 Category: Webapps...

Kepler Wallpaper Script 1.1 - SQL Injection

Exploit Title: Kepler Wallpaper Script 1.1 - SQL Injection Dork: N/A Date: 2019-01-19 Exploit Author: Ihsan Sencan Vendor Homepage: https://keplerwallpapers.online/ Software Link: https://codeclerks.com/PHP/1559/Kepler-Wallpaper-Script Version: 1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...

Wallpaper Script 3.5.0082 - Stored XSS Vulnerability

No description provided by source. Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1 Register and log on as a...

CVE-2013-7274

Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...

Cross site scripting

Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...

CVE-2013-7274

Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...

CVE-2013-7274

The CVE-2013-7274 entry documents a Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082, where remote authenticated users can inject arbitrary script/HTML via the title field during a wallpaper file upload. This is caused by insufficient input sanitization in the upload workflow...

CVE-2013-7274: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...

PT-2014-3323

Name of the Vulnerable Software and Affected Versions Wallpaper Script version 3.5.0082 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload. This could potentially lead to unauthorized...

Wallpaper script "name"跨站脚本漏洞

Wallpaper Script是一个图形平台，可以专业管理壁纸。 Wallpaper script 3.5.0082版本上传或编辑壁纸时"name"参数没有被正确过滤，成功利用后可使远程攻击者插入HTML和脚本代码，然后在用户浏览器会话中执行。 0 Wallpaper Script Wallpaper Script 3.5.0082 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wallpaperscript.com/ Exploit Title : Wallpaper Script Stored XSS...

Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting

Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1...