36 matches found
wpQuiz 2.7 - Authentication Bypass
Powered by wpQuiz - Auth bypass Vulnerability My + Author : KnocKout + Greatz : DaiMon Contact : [email protected] Software info Script : wpQuiz Version : 2.7 Download : http://webscripts.softpedia.com/script/Quizz/wpQuiz-41098.html Vulnerability Style : Auth bypass Google Dork : "Powered by...
wpQuiz Viewimage.PHP SQL注入漏洞
wpQuiz是一款基于PHP的WEB应用程序。 wpQuiz不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'Viewimage.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 Wire Plastik Design wpQuiz 2.7 目前没有解决方案提供： http://www.wireplastik.com/projects.php http://www.sebug.net/exploit/2622.html...
Sql injection
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...
CVE-2007-6172
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...
CVE-2007-6172
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...
CVE-2007-6172
The CVE-2007-6172 entry affects wpQuiz 2.7, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the id parameter to viewimage.php and comments.php. The issue is confirmed across multiple sources in the connected documents, indicating a hig...
wpquiz-sql.txt
Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...
wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...
wpQuiz 2.7 - Multiple SQL Injections
wpQuiz 2.7 - Multiple SQL Injections Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...
wpQuiz 2.7 - Multiple SQL Injections
Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...
wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities ======================================================== Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability...
CVE-2004-1704
WpQuiz versions 2.60b1–2.60b8 are affected by a privilege-escalation vulnerability exploitable via a direct request to adminrestore.php in the extras directory. The issue is described as allowing remote attackers to gain privileges. Exploit details, affected platforms beyond the product/version r...
CVE-2004-1704
WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory...
wpquiz.txt
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...
WpQuiz Gain Admin Rightd Exploit found
Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...