Vulnerabilities
Tiny Tiny RSS Blind SQL Injection
$item_id inside process_category_order() is not properly escaped. Then it's used in UPDATE statement.
15-02-2016
2 MIN READ
Vulnerabilities
$item_id inside process_category_order() is not properly escaped. Then it's used in UPDATE statement.
2 MIN READ
Vulnerabilities
$_POST['thumbtext'] and $_POST['linkbutton'] are not escaped inside huge_it_video_gallery_ajax().
1 MIN READ
Vulnerabilities
$_GET['loginerror'] is not escaped.
1 MIN READ
Vulnerabilities
`FrmFormsController
2 MIN READ
Vulnerabilities
Prevent username enumeration
5 MIN READ
Vulnerabilities
$whereClause and $whereClauseT and $whereClauseW and $whereClause2W are not escaped.
3 MIN READ
Vulnerabilities
Inside almost all wp_ajax function there is no privilege check.
1 MIN READ
Vulnerabilities
Every registered user can access plugin admin interface.
1 MIN READ
From 0 to pentesting hero
Not so long ago, to make website's content appear in real time it had to be kind of simulated. For example from the level of JavaScript - by sending a request to the server every few seconds and downloading the latest content.
24-07-2019
4 MIN READ