EMC Data Protection Advisor versions prior to 6.4 suffer from remote SQL injection and path traversal vulnerabilities.
bb15dd92d582999bd00052456097ccf3This Metasploit module exploits a SQL injection flaw in the login functionality for GoAutoDial version 3.3-1406088000 and below, and attempts to perform command injection. This also attempts to retrieve the admin user details, including the cleartext password stored in the underlying database. Command injection will be performed with root privileges. The default pre-packaged ISO builds are available from goautodial.org. Currently, the hardcoded command injection payload is an encoded reverse-tcp bash one-liner and the handler should be setup to receive it appropriately.
06c8713656083241fef0e30117e4a409WordPress Ultimate Product Catalogue plugin version 4.2.2 suffers from a remote SQL injection vulnerability.
0b8f89a4cec8f5c5303d80a98a2d4d79GLPI version 0.90.4 suffers from a remote SQL injection vulnerability.
c69a23b9f7146e1db3b123582497e405WordPress FormCraft Basic plugin version 1.0.5 suffers from multiple remote SQL injection vulnerabilities.
ab956807aad6b5f6d6ddd7dec71ed759Cisco Prime Infrastructure versions 1.1 through 3.1.6 suffer from cross site scripting, XML external entity injection, file disclosure, and remote SQL injection vulnerabilities.
a015626c21297363f1b2f3b6319821c8Joomla JoomRecipe extension version 1.0.3 suffers from a remote SQL injection vulnerability.
06fcd38782a578eef82bcddccf2c25canuevoMailer versions 6.0 and below suffer from a remote SQL injection vulnerability.
a42483e295f6acb38d72fda9b0e4dbc4Alio Applicant Portal versions 6.0 and below suffer from a remote SQL injection vulnerability.
6d41e241a31095342486a5e551b4e449WordPress Jobs plugin version 1.4 suffers from a remote SQL injection vulnerability.
faef10178334d5adfc13d10633e57a30WordPress Event List versions 0.7.8 and below suffer from a remote SQL injection vulnerability.
f9bf2c2d75a0d72d5fd483155ec083e3Real Estate Classifieds script suffers from a remote SQL injection vulnerability.
9efa7381b52e559d1789607e331e0a6aeCom Cart version 1.3 suffers from a remote SQL injection vulnerability.
67e88bf36d756b2851a031b3ef5a08c3Zenbership CMS version 1.0.8 suffers from remote SQL injection vulnerabilities.
d455090d1c79b0785dde4186f3dbc4c1PaulShop CMS versions 2017-03-25 and below suffer from a remote SQL injection vulnerability.
634164f133c43ede6f56f3922d93a47eXavier PHP Login Script and User Management Admin Panel version 2.4 suffers from a remote SQL injection vulnerability.
1da452202b8527a25808c6c827c89575Robert version 0.5 suffers from cross site request forgery, cross site scripting, remote SQL injection, and directory traversal vulnerabilities.
cfd060cdd873a90420373f8cc4f97108Kronos Telestaff versions prior to 2.92EU29 suffer from a remote SQL injection vulnerability.
1e3173c6794767a3ece3b75256922f5bPeplink version 7.0.0-build1904 suffers from cross site request forgery, cross site scripting, file deletion, and remote SQL injection vulnerabilities.
36d56c06b635fb1596ea43530b5b607eWordPress WP-Testimonials plugin versions prior to 3.4.1 suffer from a remote SQL injection vulnerability.
383a62e4766cc96ba23245d18520432ePiwigo Facetag plugin version 0.0.3 suffers from a remote SQL injection vulnerability.
265f571ac1465bf00b85cfdccc57cffcOV3 Online Administration version 3.0 suffers from multiple unauthenticated remote SQL injection vulnerabilities.
b45182a216390d5400da665f979cc9adWordPress Huge-IT Video Gallery plugin version 2.0.4 suffers from a remote SQL injection vulnerability.
7336919c380a0e84f16a4d0d5f7ce533Joomla VideoFlow extension version 1.2.0 suffers from a remote SQL injection vulnerability.
e1e6be01340a32b2c077210cc558ab38The Joomla version 3.7.0 fields component suffers from a remote SQL injection vulnerability.
6466317c69e726921d9c07b96c0f60cc
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed