wp22xmlrpc-sql.txt

/ El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category = $args3; $maxresults = $args4;...

WordPress 2.2 - xmlrpc.php SQL Injection

WordPress 2.2 - xmlrpc.php SQL Injection / El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category =...

WordPress Core 2.2 - 'xmlrpc.php' SQL Injection

/ El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category = $args3; $maxresults = $args4;...

Design/Logic Flaw

xmlrpc xmlrpc.php in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publishposts functionality, which can be used to "publish a previously saved post."...

CVE-2007-1897: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xmlrpc xmlrpc.php in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the postid variable...

CVE-2007-1893: Undefined Security Weakness

xmlrpc xmlrpc.php in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publishposts functionality, which can be used to "publish a previously saved post."...

WordPress < 2.1.3 'xmlrpc.php' SQLi

Binary data 3959.prm...

xmlrpc.php Library &lt;= 1.3.0 Remote Command Execute Exploit (2)

No description provided by source. ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | / |/ | || || | | | | || /| |...

XOOPS 2.0.11 - xmlrpc.php SQL Injection

XOOPS 2.0.11 - xmlrpc.php SQL Injection !/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else...

XOOPS 2.0.11 - 'xmlrpc.php' SQL Injection

!/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else $allchar .= chr$char; $snum++; su...

XML-RPC Library 1.3.0 - xmlrpc.php Remote Command Execution (2)

XML-RPC Library 1.3.0 - xmlrpc.php Remote Command Execution 2 ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | /...

XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ XOOPS 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar ----------------...