Gwolle Guestbook WordPress Plugin Remote File Inclusion Vulnerability

Gwolle Guestbook WordPress is a visiting message board plugin for WordPress sites. Gwolle Guestbook WordPress 1.5.3 and earlier versions do not effectively filter the value of the "abspath" HTTP GET parameter, used in the PHP require function, which allows remote attackers to include a file named...

PT-2014-2061

Name of the Vulnerable Software and Affected Versions WordPress version 0.70 Description A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the abspath variable. Recommendations For WordPress version 0.70, update to a newer version to mitigate the risk. As a...

Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion

No description provided by source. Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress Relocate Upload Plugin 0.14 Remote File Inclusion

在relocate-upload.php文件第16行,没有对传入的abspath进行过滤,导致任意文件本地远程文件包含 if isset$GET'rufolder' // WP setup and function access define'WPUSETHEMES', false; requireonceurldecode$GET'abspath'.'/wp-load.php'; // save us looking for it, it's passed as a GET parameterarameter...

CVE-2012-1205

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2012-1205

CVE-2012-1205 affects WordPress Relocate Upload plugin before 0.20. It is a PHP Remote File Inclusion via abspath in relocate-upload.php, allowing an attacker to execute arbitrary PHP code remotely. Affected component is the Relocate Upload plugin’s relocate-upload.php; root cause is improper han...

PT-2012-3128

Name of the Vulnerable Software and Affected Versions Relocate Upload plugin versions prior to 0.20 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the relocate-upload.php file. Recommendations For Relocate Upload plugin versions...

CVE-2012-1205: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

PT-2012-2961

Name of the Vulnerable Software and Affected Versions Theme Tuner plugin for WordPress versions prior to 0.8 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter in the ajax/savetag.php file. Recommendations For versions prior to 0.8,...

CVE-2012-0934: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter...

CVE-2010-5038

PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2010-5038: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

PT-2011-1973

Name of the Vulnerable Software and Affected Versions Groone's Simple Contact Form affected versions not specified Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the contact/contact.php file. Recommendations For Groone's Simple...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2011-3981: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

PT-2011-4793

Name of the Vulnerable Software and Affected Versions Allwebmenus plugin version 1.1.3 for WordPress Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the actions.php file. Recommendations For Allwebmenus plugin version 1.1.3, avoid...

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection

WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection Exploit Title: WordPress Allow PHP in Posts and Pages plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if!isset$POST'allowPHPNonce' if !wpverifynonce...

Groone's Simple Contact Form (abspath) RFI Vulnerability

Exploit for php platform in category web applications ======================================================== Groone's Simple Contact Form abspath RFI Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

CVE-2009-0463: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4849: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...