injection Archives — Page 3 of 3

Dolibarr ERP CRM < 7.0.3 PHP Code Injection

July 3, 2018 Admin

# Exploit Title: Unauthenticated Remote Code Evaluation in Dolibarr ERP CRM =<7.0.3 # Date: 06/29/2018 # Exploit Author: om3rcitak – https://omercitak.com # Vendor Homepage: https://dolibarr.org # Software Link: https://github.com/Dolibarr/dolibarr # Version: =<7.0.3 # Tested on: […]

TP-Link TL-WR841N V13 Command Injection Vulnerability

June 30, 2018June 30, 2018 Admin

* Vulnerability: Authenticated Blind Command Injection * Affected Software: TP-Link TL-WR841N v13 * Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n * Patched Version: None ##### Overview The ping and traceroute functionalities allow for OS […]

WordPress Plugin Comments Import & Export < 2.0.4 - CSV Injection

June 27, 2018June 27, 2018 Admin

[su_quote] # Exploit Title: WordPress Plugin Comments Import & Export < 2.0.4 – CSV Injection # Google Dork: N/A # Date: 2018-06-24 # Exploit Author: Bhushan B. Patil # Software Link: https://wordpress.org/plugins/comments-import-export-woocommerce/ # Affected Version: […]

RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scriptin

May 17, 2018 Admin

SEC Consult Vulnerability Lab Security Advisory < 20180516-0 > ======================================================================= title: XXE & XSS vulnerabilities product: RSA Authentication Manager vulnerable version: 8.2.1.4.0-build1394922, < 8.3 P1 fixed version: 8.3 P1 and later CVE number: CVE-2018-1247 impact: […]