AlienVault 4.3.1 radar-iso27001-A11AccessControl-pot.php SQL Injection

SQL Injection vulnerabilty in AlienVault radar-iso27001-A11AccessControl-pot.php datefrom parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Tiki Wiki CMS Groupware SQL Injection

SQL Injection vulnerabilty in Tiki Wiki CMS Groupware tiki-searchresults.php searchLang parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

PHP-Fusion 7.02.05 downloads.php SQL Injection

SQL Injection vulnerability in PHP-Fusion downloads.php orderby Parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Apache Roller RCE Linux

Apache Roller RCE with Java-based template engine Velocity Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

MediaWiki thumb.php page Parameter Remote Shell Command Injection

MediaWiki contains a flaw that is due to the program failing to properly sanitize input passed via the "page" parameter in the thumb.php script. This may allow a remote attack to inject arbitrary shell commands. Vulnerability Type: Remote Command Execution For the exploit source code contact...

Zabbix httpmon.php SQL Injection

SQL Injection vulnerability in OpenEMR Zabbix httpmon.php applications parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Open Web Analytics Password Reset Page owa_email_address Parameter SQL Injection

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php. Vulnerability Type: SQL Injection For the exploit source co...

Wordpress Search Everything SQL Injection

SQL Injection vulnerabilty in Wordpress Search Everything plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Dolibarr 3.4.0 SQL Injection

SQL Injection vulnerabilty in Dolibarr exportcsv.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

POSH /portal/addtoapplication.php rssurl Parameter SQL Injection

SQL injection vulnerability in portal/addtoapplication.php in POSH aka Posh portal or Portaneo 3.0 before 3.3.0 allows remote attackers to execute arbitrary SQL commands via the rssurl parameter. Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla 3.2.2 single-contact SQL Injection

SQL Injection vulnerability in Joomla 3.2.2 Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

pfSense Snort File Disclosure

File disclosure vulnerability in snortlogview.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

vtiger CRM 6.0.0 RCE

Remote command execution vulnerability in vtiger CRM Install Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vtiger CRM 6.0 RC RCE

Remote command execution vulnerability in vtiger CRM Install Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder LFI

Local file include vulnerability in vtiger CRM kcfinder component Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder File Upload

File upload vulnerability in vtiger CRM kcfinder component Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Seportal 2.5 SQLi

SQL injection in staticpages.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

W3 Total Cache Plugin Remote Code Execution

Remote code execution vulnerability in W3 Total Cache Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 get_picklists SQLi

SQL Injection vulnerability in vtiger CRM getpicklists SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 File Upload

File upload vulnerability in vtiger CRM SOAP AddEmailAttachment service Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 get_tickets_list SQLi

SQL Injection vulnerability in vtiger CRM getticketslist SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

AdRotate library/clicktracker.php track Parameter SQL Injection

AdRotate contains a flaw that may allow carrying out an SQL injection attack.The issue is due to the library/clicktracker.php script not properly sanitizing user-supplied input to the 'track' parameter. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database,...

Joomla 3.2.2 mod_tags_similar SQL Injection

SQL Injection vulnerability in Joomla 3.2.2 modtagssimilar/helper.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

php_address_book authentication SQL injection

SQL Injection vulnerability in PHP Address Book Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

appRain 3.0.2 SQL Injection

SQL Injection vulnerability in appRain Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 3.7.8.1 RCE

Remote command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HP Intelligent Management Center BIMS UploadServlet File Upload

File upload vulnerability in HP Intelligent Management Center BIMS UploadServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 3.7.8.1 File Disclosure

File disclosure vulnerability in Sophos Web Protection Appliance Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Apache-Struts2 DevMode RCE

Apache-Struts2 DevMode RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ZonPHP 2.25 File Upload

File upload vulnerability in ZonPHP ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Wordpress WP-FileManager 1.3.0 File Disclosure

File disclosure vulnerability in WP-FileManager incl/libfile.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Nuked-klaN 1.7.7 / SP4.4 SQL injection

Nuked-klaN = 1.7.7 / = SP4.4 SQL Injection via Referer header Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

TomatoCart 1.1.8 LFI

Local file include vulnerability in TomatoCart rpc.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

HP SiteScope runOMAgentCommand 11.20 RCE

Remote code execution vulnerability in HP SiteScope runOMAgentCommand Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HP SiteScope issueSiebelCmd 11.20 RCE

Remote code execution vulnerability in HP SiteScope issueSiebelCmd Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

SPIP ecran_securite connect Parameter RCE

SPIP core/securite/ecransecurite.php connect Parameter Remote Code Execution Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache Roller OGNL Injection

This module exploits an OGNL injection vulnerability in Apache Roller 5.0.2. The vulnerability is due to an OGNL injection on the UIAction controller because of an insecure usage of the ActionSupport.getText method. Vulnerability Type: Remote Command Execution For the exploit source code contact...

vBulletin 5.x Remote Administrator Injection

Remote administrator injection vulnerability in vBulletin upgrade.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

vBulletin 4.1.x RCE

Remote command execution vulnerability in vBulletin upgrade.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Pydio File Upload

Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Ginkgo CMS 5.0 SQL Injection

SQL Injection vulnerability in Ginkgo CMS rang parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Apache-Struts DefaultActionMapper < 2.3.15.1 RCE Linux

Apache-Struts2 RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache-Struts IncludeParams < 2.3.14.2 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache-Struts Showcase < 2.3.14.1 RCE Linux

Apache Struts Crafted Parameter Arbitrary OGNL Code Execution Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Bilboplanet SQLi via auth

SQL Injection vulnerability in BilboPlanet auth.php. Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

HP PCM+ SNAC Registration Server UpdateCertificatesServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateCertificatesServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

BigTree CMS 4.0 RC2 SQL Injection

SQL Injection vulnerability in BigTree CMS Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

GLPI 0.84.1 RCE

Remote command execution vulnerability in GLPI install/install.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Xibo 1.4.1 LFI

Local file include vulnerability in Xibo p parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...