PT-2014-5968

Name of the Vulnerable Software and Affected Versions Rezgo plugin versions 1.4.2 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the response parameter in the book...

PT-2014-5969

Name of the Vulnerable Software and Affected Versions Rezgo Online Booking plugin versions prior to 1.8.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This is achieved via the tags or search for parameter in the...

WordPress Evarisk plugin <= 5.1.3.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Evarisk plugin = 5.1.3.6 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/evarisk.5.1.3.6.zip Version: 5.1.3.6 tested Note:...

vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability

No description provided by source. Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability Google Dork: No Dork Date: 19/10/2012 Exploit Author: Junookyo Vendor Homepage: http://hoiquantinhoc.com Software Link:...

苹果CMS SQL注入一枚

简要描述： 看到之前一发路人甲的漏洞，厂商说未测试成功，我也换个地方试试 详细说明： WooYun: 苹果CMS系统sql注入一枚 这个漏洞，厂商说未测试成功，然后继续换个地方看看。 inc/ajax.php:123行 elseif$ac=='score' if$id 10 $score = 10; if$tab=='art' $col='a'; else $col='d'; $sql="SELECT ".$col."score,".$col."scoreall,".$col."scorenum FROM pre".$tab." WHERE ".$col."id=" .$id;...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

CVE-2014-4163

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

CVE-2014-4163: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...

PT-2014-5714

Name of the Vulnerable Software and Affected Versions Featured Comments plugin version 1.2.1 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests that change the buried or featured status of a comment. This is achieved via a reque...

WordPress Featured Comments 1.2.1 Cross Site Request Forgery

Details ================ Software: Featured Comments Version: 1.2.1 Homepage: http://wordpress.org/plugins/feature-comments/ Advisory ID: dxw-2014-1360 CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CSRF in Featured Comments 1.2.1 allows an...

PHPDISK 二次注入一枚。

简要描述： No check out。 详细说明： 在ajax.php中 $filefileid = int$filefileid; $filefilesize = int$filefilesize; $filefileextension = $db-escapetrim$filefileextension; $filefilename = $db-escapetrim$filefilename; $num = @$db-resultfirst"select count from $tpffiles where yunfid='$filefileid' and...

CVE-2014-3210

CVE-2014-3210 describes an SQL injection in the WordPress Booking System (Booking Calendar) plugin. The vulnerability affects the plugin’s dopbs-backend-forms.php and allows remote authenticated users to execute arbitrary SQL commands via the booking_form_id parameter sent to wp-admin/admin-ajax....

PT-2014-5147

Name of the Vulnerable Software and Affected Versions Booking Calendar plugin versions prior to 1.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the booking form id parameter to the "/wp-admin/admin-ajax.php" API endpoint...

CVE-2014-3210: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dopbs-backend-forms.php in the Booking System Booking Calendar plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the bookingformid parameter to wp-admin/admin-ajax.php...

WordPress Work-The-Flow 1.2.1 Shell Upload

Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload panel and intercept the POST request to...

Wordpress Work-The-Flow Plugin 1.2.1 - Arbitrary File Upload

Exploit for php platform in category web applications Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf upload...

WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload

WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload Author: nopesled Date: 24/04/14 Software: https://wordpress.org/plugins/work-the-flow-file-upload/ Company: http://wtf-fu.com/ Version: 1.2.1 Tested on: Windows 7 Vulnerability: Unrestricted File Upload Submit an image file via the wtf...

CVE-2013-7196

static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified valitemid parameter for the publication...

CVE-2013-7196

static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified valitemid parameter for the publication...

PT-2014-3285

Name of the Vulnerable Software and Affected Versions PHPFox versions 3.7.3 through 3.7.5 Description The issue allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication. This is achieved by sending a request with a modified valitem id...