Jquery-File-Tree-1.6.6-Path-Traversal

Jquery-File-Tree-1.6.6-Path-Traversal Jquery File Tree 1.6.6 路径遍历漏洞利用（CVE-2017-1000170） WordPress 的 jQueryFileTree 这将在 victim.com/backup/admin 及其子路径中搜索所有 .zip 和 .sql 文件 （必须提供点号以指示它是扩展名） xpljqueryFileTree.php -u victim.com -f .log,idrsa -a -r | - 这将在服务器的所有文件夹中搜索所有名为 "idrsa" 或扩展名为 ".log" 的文件，...

CVE-2017-1000170

creationtimestamp| type| source ---|---|--- 2022-05-13 01:11:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p739-9479-5wr2 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-11-14 00:00:00+00:00| seen| The Shadowserver...

WordPress Delightful Downloads Jquery File Tree 1.6.6 Plugin - Path Traversal Exploit

Exploit Title: WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal Exploit Author: Nicholas Ferreira Vendor Homepage: https://github.com/A5hleyRich/delightful-downloads Version: =1.6.6 Tested on: Debian 11 CVE : CVE-2017-1000170 PHP version exploit: 7.3.27 POC: curl --da...

WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal

Exploit Title: WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal Date: 19/03/2021 Exploit Author: Nicholas Ferreira Vendor Homepage: https://github.com/A5hleyRich/delightful-downloads Version: =1.6.6 Tested on: Debian 11 CVE : CVE-2017-1000170 PHP version exploit: 7.3....

WordPress Delightful Downloads Jquery File Tree 1.6.6 Path Traversal

Exploit Title: WordPress Plugin Delightful Downloads Jquery File Tree 1.6.6 - Path Traversal Date: 19/03/2021 Exploit Author: Nicholas Ferreira Vendor Homepage: https://github.com/A5hleyRich/delightful-downloads Version: =1.6.6 Tested on: Debian 11 CVE : CVE-2017-1000170 PHP version exploit: 7.3....

Jenkins < 2.107.2 / 2.116 Multiple Vulnerabilities

The version of Jenkins running on the remote web server is prior to 2.116 or is a version of Jenkins LTS prior to 2.107.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported versio...

CVE-2018-1000170

CVE-2018-1000170 is a cross-site scripting vulnerability in Jenkins, affecting 2.115 and older (including LTS 2.107.1 and older). The issue resides in confirmationList.jelly and stopButton.jelly, where an attacker with Job/Configure and/or Job/Create permissions can create an item name containing...

CVE-2017-1000170

jqueryFileTree 2.1.5 and older Directory Traversal...

CVE-2017-1000170

jqueryFileTree 2.1.5 and older Directory Traversal...

CVE-2017-1000170

jqueryFileTree 2.1.5 and older Directory Traversal...

CVE-2017-1000170

CVE-2017-1000170 affects the WordPress Delightful Downloads plugin’s jqueryFileTree 2.1.5 and older. The connected documents describe a directory traversal/local file inclusion vulnerability in jqueryFileTree, allowing an attacker to include arbitrary local files via the jqueryFileTree.php connec...