exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from red0xff

WordPress Email Subscribers And Newsletter Hash SQL Injection Scanner

Posted Sep 1, 2024

Authored by h00die, Wordfence, red0xff | Site metasploit.com

Email Subscribers and Newsletters plugin contains an unauthenticated timebased SQL injection in versions before 4.3.1. The hash parameter is vulnerable to injection.

tags | exploit, sql injection

advisories | CVE-2019-20361

SHA-256 | 883d0eaca9891a011a583d7cbea23b1c7f956800de4a058033366b43cb374379

Download | Favorite | View

WordPress Modern Events Calendar SQL Injection Scanner

Posted Sep 1, 2024

Authored by h00die, red0xff, Hacker5preme | Site metasploit.com

Modern Events Calendar plugin contains an unauthenticated timebased SQL injection in versions before 6.1.5. The time parameter is vulnerable to injection.

tags | exploit, sql injection

advisories | CVE-2021-24946

SHA-256 | 982d4d258c486cd930bfa6a8ab9aa9156ad56e14deb8a20ab4d8c1bd29c21177

Download | Favorite | View

WordPress Loginizer Log SQL Injection Scanner

Posted Sep 1, 2024

Authored by h00die, mslavco, red0xff | Site metasploit.com

Loginizer wordpress plugin contains an unauthenticated timebased SQL injection in versions before 1.6.4. The vulnerable parameter is in the log parameter. Wordpress has forced updates of the plugin to all servers.

tags | exploit, sql injection

advisories | CVE-2020-27615

SHA-256 | 19a3dea18cc17107d42a30ec2c31df71bf5f3d9812f33d059c921e228a7efb3e

Download | Favorite | View