225 matches found
WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection
Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...
WHMCS Group Pay Plugin 1.5 (grouppay.php, hash param) - SQL Injection
We have found a SQL injection inside the group pay plugin for WHCMS. A lot of game hosting companies are using this plugin. SQL Injection is in the function gpLoadUserFromHash. Exploits ============ - SQL Injection grouppay.php?hash=%hash%' and '1'='1 ============ Code SQL Injection ============...
WHMCS Grouppay 1.5 SQL Injection
Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...
WHMCS 5.x Authentication Bypass
WHMCS 5.x versions suffers from a cookie-validation vulnerability, where sessions can be modified and authentication can be easily bypassed. Description : WHMCS 5.x Authentication Bypass Vulnerability Author : AgdScorp Contact: [email protected] Version : 5.x Link :...
WHMCS 5.x Authentication Bypass Vulnerability
WHMCS's admin-verification system modules can be bypassed thru cookie-validation due to cache2 security failures. Description : WHMCS 5.x Authentication Bypass Vulnerability Author : AgdScorp Contact: email protected Version : 5.x Link : http://www.whmcs.com/order-now/ Date : Monday, December 31,...
WHMCS 5.0 - Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access to the affected...
WHMCS 5.0 - Insecure Cookie Authentication Bypass
WHMCS 5.0 - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/57145/info WHMCS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability ...
WHMCS 5.1.3 Full Path Disclosure vulnerabilities
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
WHMCompleteSolution (WHMCS) 4.5.2 - googlecheckout.php SQL Injection
WHMCompleteSolution WHMCS 4.5.2 - googlecheckout.php SQL Injection source: https://www.securityfocus.com/bid/56173/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...
WHMCompleteSolution (WHMCS) 4.5.2 - 'googlecheckout.php' SQL Injection
source: https://www.securityfocus.com/bid/56173/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
WHMCS 4.5.2 Blind SQL Injection
/ || | \ | / | '| \ \ /\ / / | '/ \ | || | | | \ V V / | | | | / |/ \,|| // ,|| | Software : WHMCS WHMCompleteSolution Google Dork: Turn on thinking mode :P Date: 10/22/2012 Author: Starware Security Team www.Resecure.me Contact Us : [email protected] Vendor Homepage:...
WHMCS v4.5.2 Blind SQL Injection Vulnerability
WHMCS WHMCompleteSolution Affected versions: 4.5.x / || | \ | / | '| \ \ /\ / / | '/ \ | || | | | \ V V / | | | | / |/ \,|| // ,|| | Software : WHMCS WHMCompleteSolution Google Dork: Turn on thinking mode :P Date: 10/22/2012 Author: Starware Security Team www.Resecure.me Contact Us :...
WHMCompleteSolution (WHMCS) 5.0 - KnowledgeBase.php?search Cross-Site Scripting
WHMCompleteSolution WHMCS 5.0 - KnowledgeBase.php?search Cross-Site Scripting source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input...
WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)
WHMCompleteSolution WHMCS 5.0 - Cross-Site Request Forgery Multiple Application Function source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize...
WHMCompleteSolution (WHMCS) 5.0 - Cross-Site Request Forgery (Multiple Application Function)
source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the...
WHMCompleteSolution (WHMCS) 5.0 - 'KnowledgeBase.php?search' Cross-Site Scripting
source: https://www.securityfocus.com/bid/53740/info WHMCS is prone to a cross-site scripting vulnerability and multiple HTML-parameter-pollution vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the...
WHMCS 5 Multiple CSRF (Add Admin) / XSS Vulnerability
Exploit for php platform in category web applications Title: WHMCS 5 Multiple CSRF Add Admin and XSS Vulnerability Version: Latest version 5.1 and other previous version maybe vulnerable Vendor: www.whmcs.com Date: 2012-05-30 Tested on: win/linux Author/Found by: Shadman Tanjim Email:...
WHMCS 5 Cross Site Request Forgery / Cross Site Scripting
Title: WHMCS 5 Multiple CSRF Add Admin and XSS Vulnerability Version: Latest version 5.1 and other previous version maybe vulnerable Vendor: www.whmcs.com Date: 2012-05-30 Tested on: win/linux Author/Found by: Shadman Tanjim Email: [email protected] Greetz: Sayem Islam, Shahee Mirza, JingoBD,...
WHMCompleteSolution (WHMCS) - boleto_bb.php SQL Injection
WHMCompleteSolution WHMCS - boletobb.php SQL Injection source: https://www.securityfocus.com/bid/53711/info WHMCS WHM Complete Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
