CVE-2013-2631

TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...

CVE-2013-2631: Exposure of Sensitive Information to an Unauthorized Actor

TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...

PT-2020-7404

Name of the Vulnerable Software and Affected Versions: TinyWebGallery TWG versions 1.8.9 and earlier Description: The issue allows remote attackers to obtain sensitive information. This is achieved through the parameters twg browserx and twg browsery in the page "image.php". Recommendations: For...

PT-2019-19800

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 2.2.10 Description The issue concerns the class.showtime2 image.php file in CMS Made Simple, where it fails to verify that a watermark file has a standard image file extension, such as GIF, JPG, JPEG, or PNG...

irenevinkenburg.nl XSS vulnerability

Open Bug Bounty ID: OBB-683534 Description| Value ---|--- Affected Website:| irenevinkenburg.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Directory traversal

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

CVE-2018-16283

CVE-2018-16283 affects the WordPress plugin Wechat Broadcast (versions ≤ 1.2.0). The NVD/Nuclei/Exploits describe a Local/Directory Traversal vulnerability in the plugin’s Image.php that reads the GET parameter url without proper sanitization, enabling an attacker to include local or remote files...

CVE-2018-16283: Improper Limitation of a Pathname to a Restricted Directory

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter...

PT-2018-13462

Name of the Vulnerable Software and Affected Versions Wechat Broadcast plugin versions 1.2.0 and earlier Description The issue allows Directory Traversal via the url parameter in the Image.php file. Recommendations For Wechat Broadcast plugin versions 1.2.0 and earlier, update to a version later...

Wechat Broadcast <= 1.2.0 - Local/Remote File Inclusion

This bug was found in the file: /wechat-broadcast/wechat/Image.php echo filegetcontentsisset$GET"url" ? $GET"url" : ''; The parameter "url" it is not sanitized allowing include local or remote files To exploit the vulnerability only is needed use the version 1.0 of the HTTP protocol to interact...

WordPress Wechat Broadcast 1.2.0 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion Author: Manuel Garcia Cardenas Software link: https://es.wordpress.org/plugins/wechat-broadcast/ CVE: N/A Description This bug was found in the file:...

WordPress Wechat Broadcast 1.2.0 Local File Inclusion

Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion Author: Manuel Garcia Cardenas Date: 2018-09-19 Software link: https://es.wordpress.org/plugins/wechat-broadcast/ CVE: N/A Description This bug was found in the file: /wechat-broadcast/wechat/Image.php echo...

Wechat Broadcast <= 1.2.0 - Local/Remote File Inclusion

This bug was found in the file: /wechat-broadcast/wechat/Image.php echo filegetcontentsisset$GET"url" ? $GET"url" : ''; The parameter "url" it is not sanitized allowing include local or remote files To exploit the vulnerability only is needed use the version 1.0 of the HTTP protocol to interact...

WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion

Exploit Title: WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion Author: Manuel Garcia Cardenas Date: 2018-09-19 Software link: https://es.wordpress.org/plugins/wechat-broadcast/ CVE: CVE-2018-16283 Description This bug was found in the file: /wechat-broadcast/wechat/Image.php echo...

comete.ch XSS vulnerability

Open Bug Bounty ID: OBB-636862 Description| Value ---|--- Affected Website:| comete.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lesetalspaysans.fr XSS vulnerability

Open Bug Bounty ID: OBB-636843 Description| Value ---|--- Affected Website:| lesetalspaysans.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

testing.tweaktown.com XSS vulnerability

Open Bug Bounty ID: OBB-614254 Description| Value ---|--- Affected Website:| testing.tweaktown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...