Posts Tagged ‘Unauthorized change’

Wordpress Vulnerability

SQL-injection in All Video Gallery

Vulnerability: SQL-injection in WordPress All Video Gallery

Danger: High
Patch: Yes

Vector operation: Remote
Impact: Unauthorized change

Affected products: WordPress All Video Gallery Plugin 1.x

Affected versions: WordPress All Video Gallery 1.1 versions prior to 11.02.2012, possibly earlier.

Description:

The vulnerability allows a remote user to execute arbitrary SQL commands in the application database. (more…)

Joomla vulnerability

SQL-injection in Spider Catalog

Vulnerability:SQL-injection in the Joomla! Spider Catalog

Danger: middle
Number of vulnerabilities: 1

Impact: Unauthorized change

Affected products: Spider Catalog 1.x (component for Joomla!)

Affected versions: Joomla! Spider Catalog 1.1, maybe earlier

Description:

The vulnerability allows a remote user to execute arbitrary SQL commands in the application database. (more…)

Vulnerability

SQL-injection in MyBB

Vulnerability: SQL-injection in MyBB Follower User Plugin

Danger: High
Quantity of vulnerabilities: 1
Impact: Unauthorized change

Exploit: PoC code
Affected products: Follower User 1.x (plugin for MyBB)

Affected versions: MyBB Follower User Plugin 1.5, maybe earlier

Description:

The vulnerability allows a remote user to execute arbitrary SQL commands in the application database. (more…)