BGA Security Team discovered an SQL injection vulnerability in Proticaret E-Commerce Script v3.0. The vulnerability is remotely exploitable and allows an attacker to gain access to the database of the application. The vulnerability is caused due to the application not properly sanitizing user-supplied input before using it in an SQL query. An attacker can exploit this vulnerability by sending a specially crafted SQL query to the application. This will allow the attacker to gain access to the database of the application.
The message system of script is not secure. You can run XSS payloads on 'Subject' and 'Message' inputs. If you use 'Subject' input for attack and send the message to admin when admin login the system it will be directly affect by vulnerability. Also profile section inputs are vulnerable.
The variable 'f' in the URL http://target/components/com_hdflvplayer/hdflvplayer/download.php?f= is not sanitized, allowing an attacker to download arbitrary files from the server.
Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow remote attackers to execute arbitrary SQL commands via the q parameter to (1) api/v1/repos/search, which is not properly handled in models/repo.go, or (2) api/v1/users/search, which is not properly handled in models/user.go.
Gogs(Go Git Service) is a painless self-hosted Git Service written in Go. It is very similiar to the github hosting plattform. Multiple users can create multiple repositories and share code with others with the git version control system. Repositories can be marked as public or private to prevent access from unauthorized users. Gogs provides a view to filter issues by labels. This view is accessible at /<username>/<repository>/issues?labels=&type=&state= The labels Parameter of this view is vulnerable to a blind SQL injection.
The ossec 2.8 Insecure Temporary File Creation Vulnerability allows an attacker to gain root privileges on the target system by exploiting a vulnerability in the ossec 2.8 software. The vulnerability exists due to the insecure temporary file creation process, which allows an attacker to create a malicious file in the /tmp directory and then execute arbitrary code as root. The attacker can then gain full control of the system.
This modules exploits the Windows OLE Automation Array Remote Code Execution Vulnerability. Internet MS-14-064, CVE-2014-6332. The vulnerability exists in Internet Explorer 3.0 until version 11 within Windows95 up to Windows 10.
MyBB forum software suffers on multiple vulnerabilities, including SQL Injection and Cross Site Scripting. Such bugs may allow attacker to perform remote sql queries against the database.
You can upload your shell from 'Photo' section while register the system. And then chekc your shell from here; http://example.com/assets/uploads/images/shellname.php
An authenticated user with either 'Resource Administrator' or 'Administrator' role privileges is able to arbitrary enumerate files and subsequently delete them off the OS level. In order to trigger the flaw, send a HTTP GET request similar to: https://<ip>/tmui/Control/jspmap/tmui/system/archive/properties.jsp?&name=../../../../../etc/passwd. If the file exists, the user can either send, a similar to, the next HTTP POST request or simply click on the Delete button through the GUI -the button will be displayed only if the enumerated file exists-.
Services By CQR