Menu

Search for hundreds of thousands of exploits

"Contus Job Portal - 'Category' SQL Injection"

Author

Exploit author

Lazmania61

Platform

Exploit platform

java

Release date

Exploit published date

2012-01-13

Download file

1
2
3
4
5
6
7
source: https://www.securityfocus.com/bid/51404/info

Contus Job Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/demo/jobresult?searchname=quickjobsearch&Keywords=&Location=&Category=16รข??A
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2020-11-02 "Apache Flink 1.9.x - File Upload RCE (Unauthenticated)" webapps java bigger.wing
2020-10-29 "WebLogic Server 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 - Unauthenticated RCE via GET request" webapps java "Mohammed Althibyani"
2020-10-20 "Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution" webapps java "Jonatas Fil"
2020-10-19 "Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in" webapps java "Daniel Morris"
2020-09-09 "Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)" webapps java V1n1v131r4
2020-09-07 "ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)" webapps java Hodorsec
2020-08-10 "ManageEngine ADSelfService Build prior to 6003 - Remote Code Execution (Unauthenticated)" webapps java "Bhadresh Patel"
2020-07-26 "ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection" webapps java aldorm
2020-07-07 "Exhibitor Web UI 1.7.1 - Remote Code Execution" webapps java "Logan Sanderson"
2020-06-04 "VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution" webapps java "Tomas Melicher"
Release Date Title Type Platform Author
2014-07-07 "xClassified - 'ads.php' SQL Injection" webapps php Lazmania61
2014-04-08 "Joomla! Component Inneradmission - 'index.php' SQL Injection" webapps php Lazmania61
2012-01-19 "Vastal EzineShop - 'view_mags.php' SQL Injection" webapps php Lazmania61
2012-01-18 "Freelance Zone - 'show_code.php' SQL Injection" webapps php Lazmania61
2012-01-18 "Toner Cart - 'show_series_ink.php' SQL Injection" webapps php Lazmania61
2012-01-18 "MMORPG Zone - 'view_news.php' SQL Injection" webapps php Lazmania61
2012-01-13 "Contus Job Portal - 'Category' SQL Injection" webapps java Lazmania61
2012-01-12 "Joomla! Component com_contushdvideoshare 1.3 - 'id' SQL Injection" webapps php Lazmania61
2011-12-18 "Video Community Portal - 'userID' SQL Injection" webapps php Lazmania61
2011-12-17 "Flirt-Projekt 4.8 - 'rub' SQL Injection" webapps php Lazmania61
2011-12-17 "Social Network Community 2 - 'userID' SQL Injection" webapps php Lazmania61
2011-07-25 "Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection" webapps php Lazmania61
2011-07-18 "BlueSoft (Multiple Products) - Multiple SQL Injections" webapps php Lazmania61
2011-07-17 "BlueSoft Social Networking CMS - SQL Injection" webapps php Lazmania61
2011-07-15 "Auto Web Toolbox - 'id' SQL Injection" webapps php Lazmania61
2011-07-15 "Easy Estate Rental - 's_location' SQL Injection" webapps php Lazmania61
2011-07-15 "AJ Classifieds - 'listingid' SQL Injection" webapps php Lazmania61 
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Cipher Protocols Sigalg Trusted

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Host WAF detected