2319 matches found
WordPress Theme LaBomba Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title : WordPress Theme LaBomba Arbitrary File Download Vulnerability Exploit Author : NULLPointer Date : 17/09/2014 Vendor Homepage : http://themeforest.net/item/labomba-responsive-multipurpose-wordpress-theme/6106367 Version: 1.7...
WordPress core theme Arbitrary File Download Vulnerability
Usage Info Download Config From The Target. http://localhost/wp-admin/admin-ajax.php?action=revslidershowimage&img=../wp-config.php Exploit Title: WordPress core theme Arbitrary File Download Vulnerability Date: 2014/09/11 Google Dork : inurl:/wp-content/themes/core/framework/wordpress-importer/...
WordPress Plugin WP to Twitter - Authentication Bypass
WordPress Plugin WP to Twitter - Authentication Bypass source: https://www.securityfocus.com/bid/69741/info WP to Twitter Plugin for WordPress is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized...
Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download
No description provided by source. WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405...
Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download
Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...
Sql injection
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...
PT-2014-6340
Name of the Vulnerable Software and Affected Versions Gallery Objects plugin version 0.4 for WordPress Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the viewid parameter in a go view object action to the...
CVE-2014-5201: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...
Starbox Voting - ajax.php Full Path Disclosure
The Starbox Voting WordPress plugin was affected by an ajax.php Full Path Disclosure security vulnerability...
NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...
WP DS FAQ <= 1.3.2 - ajax.php id Parameter SQL Injection
The WP DS FAQ WordPress plugin was affected by an ajax.php id Parameter SQL Injection security vulnerability...
Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit
...
Ajax Pagination 1.1 - wp-admin/admin-ajax.php loop Parameter Local File Inclusion
Plugin is still affected and has been closed...
DZS Video Gallery - ajax.php source Parameter Reflected XSS
The dzs-videogallery WordPress plugin was affected by an ajax.php source Parameter Reflected XSS security vulnerability...
WordPress Pinshop Theme - File Upload Arbitrary Code Execution
A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Pinshop theme. Solution Update the theme...
WordPress Slide Theme - File Upload Arbitrary Code Execution
A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Slide theme. Solution Update the theme...
WordPress Elemin Theme - File Upload Arbitrary Code Execution
A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Elemin theme. Solution Update the theme...
WordPress Bloggie Theme - File Upload Arbitrary Code Execution
A "themify-ajax.php" file upload arbitrary PHP code execution vulnerability was found in WordPress Bloggie theme. Solution Update the theme...
