Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...

Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download

WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...

Sql injection

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...

Starbox Voting - ajax.php Full Path Disclosure

The Starbox Voting WordPress plugin was affected by an ajax.php Full Path Disclosure security vulnerability...

NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...

WP DS FAQ <= 1.3.2 - ajax.php id Parameter SQL Injection

The WP DS FAQ WordPress plugin was affected by an ajax.php id Parameter SQL Injection security vulnerability...

Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit

...

WordPress Pinshop Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Pinshop theme. Solution Update the theme...

Ajax Pagination 1.1 - wp-admin/admin-ajax.php loop Parameter Local File Inclusion

Plugin is still affected and has been closed...

WordPress Elemin Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Elemin theme. Solution Update the theme...

WordPress Bloggie Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Bloggie theme. Solution Update the theme...

DZS Video Gallery - ajax.php source Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by an ajax.php source Parameter Reflected XSS security vulnerability...

WordPress Slide Theme - File Upload Arbitrary Code Execution

A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Slide theme. Solution Update the theme...

CVE-2014-4580

The vulnerability CVE-2014-4580 affects the WordPress WP BlipBot plugin (versions

vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability

No description provided by source. Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability Google Dork: No Dork Date: 19/10/2012 Exploit Author: Junookyo Vendor Homepage: http://hoiquantinhoc.com Software Link:...

WordPress Evarisk plugin <= 5.1.3.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Evarisk plugin = 5.1.3.6 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/evarisk.5.1.3.6.zip Version: 5.1.3.6 tested Note:...

苹果CMS SQL注入一枚

简要描述： 看到之前一发路人甲的漏洞，厂商说未测试成功，我也换个地方试试 详细说明： WooYun: 苹果CMS系统sql注入一枚 这个漏洞，厂商说未测试成功，然后继续换个地方看看。 inc/ajax.php:123行 elseif$ac=='score' if$id 10 $score = 10; if$tab=='art' $col='a'; else $col='d'; $sql="SELECT ".$col."score,".$col."scoreall,".$col."scorenum FROM pre".$tab." WHERE ".$col."id=" .$id;...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

CVE-2014-4163

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

WordPress Featured Comments 1.2.1 Cross Site Request Forgery

Details ================ Software: Featured Comments Version: 1.2.1 Homepage: http://wordpress.org/plugins/feature-comments/ Advisory ID: dxw-2014-1360 CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CSRF in Featured Comments 1.2.1 allows an...