modpizza.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626983 Description| Value ---|--- Affected Website:| modpizza.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

boingo.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626980 Description| Value ---|--- Affected Website:| boingo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

tribunemedia.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626977 Description| Value ---|--- Affected Website:| tribunemedia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

bates.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626966 Description| Value ---|--- Affected Website:| bates.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

newyorker.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626955 Description| Value ---|--- Affected Website:| newyorker.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

rollingstones.com XSS vulnerability

Open Bug Bounty ID: OBB-626946 Description| Value ---|--- Affected Website:| rollingstones.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

designbygolden.com.au Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626940 Description| Value ---|--- Affected Website:| designbygolden.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

longitudes.ups.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626926 Description| Value ---|--- Affected Website:| longitudes.ups.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

www2.cuny.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626925 Description| Value ---|--- Affected Website:| www2.cuny.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

unitehere.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-625043 Description| Value ---|--- Affected Website:| unitehere.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

LocalTapiola: xmlrpc.php FILE IS enable it will used for bruteforce attack and denial of service

hy https://www.lahitapiolarahoitus.fi is wordpress site Wordpress that have xmlrpc.php enabled for pingbacks, trackbacks, etc. can be made as a part of a huge botnet causing a major DDOS. The website https://www.lahitapiolarahoitus.fi has the xmlrpc.php file enabled and could thus be potentially...

Bo-blog 2.1.1 xmlrpc.php 上传漏洞

No description provided by source...

withinsecurity: DDOS using xmlrpc.php

Wordpress blogs that have xmlrpc.php enabled for pingbacks, trackbacks, etc. can be made as a part of a huge botnet causing a major DDOS. The blog at withinsecurity.com has the xmlrpc.php file enabled and could thus be potentially used for such an attack against other victim hosts. In order to...

xmlrpc.php Library <= 1.3.0 - Remote Command Execute Exploit (2)

No description provided by source. ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | / |/ | || || | | | | || /| |...

PT-2014-4965

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request to the costview3/xmlrpc server/xmlrpc.php file in CostView. Recommendatio...

CVE-2014-2935: Improper Neutralization of Special Elements used in an OS Command

costview3/xmlrpcserver/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request...

WordPress 3.8.1 /xmlrpc.php拒绝服务漏洞

WordPress是一款内容管理系统。 WordPress 3.8.1 /xmlrpc.php 文件有ping其他主机的功能，通过这个功能可以请求多个站点，DDOS攻击别的网站。 0 WordPress 3.8.1 目前没有详细解决方案提供： http://www.wordpress.org...

WordPress 3.8.1 /xmlrpc.php 拒绝服务漏洞

No description provided by source...

emlog 5.0.1 xmlrpc.php 后门漏洞

emlog是一款流行的个人博客系统，其5.0.1版本存在后门文件，攻击者利用后门可以控制网站。 emlog 5.0.1...

WordPress 'xmlrpc.php' pingback.ping Server-Side Request Forgery

The WordPress install hosted on the remote web server is affected by a server-side request forgery vulnerability because the 'pingback.ping' method used in 'xmlrpc.php' fails to properly validate source URIs Uniform Resource Identifiers. A remote, unauthenticated attacker can exploit this issue t...