WordPress Ya'aburnee / Dignitas Privilege Escalation

------------------------------------------------------------------------------ WordPress Different-Themes Previlage Escalation ------------------------------------------------------------------------------ - Vulnerability Author: @Evex1337 - Themes Affected: Ya'aburnee Dignitas - Themes Link:...

Solarwinds Orion Service SQL Injection Vulnerability

Various remote SQL injection vulnerabilities exist in the core Orion service used in most of the Solarwinds products. Affected products include Network Performance Monitor below version 11.5, NetFlow Traffic Analyzer below version 4.1, Network Configuration Manager below version 7.3.2, IP Address...

Solarwinds Orion Service SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...

Wordpress Plugin WordPress Survey and Poll SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WordPress Survey and Poll is one of the survey and poll plugin. A SQL injection vulnerability exists in the...

Sql injection

SQL injection vulnerability in the ajaxsurvey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the surveyid parameter in an ajaxsurvey action to wp-admin/admin-ajax.php...

WordPress Plugin Apptha WordPress Video Gallery SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site .Apptha WordPress Video Gallery contus-video-gallery is one of the video gallery plugin. A SQL injection...

Wordpress Plugin Ajax-Store-Locator 1.2 /ajax-store-locator-wordpress_0/sl_file_download.php 任意文件下载漏洞

No description provided by source...

CVE-2015-2065

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

Drupal Ajax Timeline Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Ajax Timeline module due to the program failing to properly filter user-supplied input. An attacker could use thi...

WordPress Plugin Survey and Poll 1.1 - Blind SQL Injection

WordPress Plugin Survey and Poll 1.1 - Blind SQL Injection Exploit Title : Wordpress Survey and poll Blind SQL Injection Data : 2015 – 02 - 11 Exploit Author : Securely Yoo Hee man Plugin : WordPress Survey and Poll Vender Homepage : http://modalsurvey.sympies.com Tested On : Windows XP /...

PT-2015-5366

Name of the Vulnerable Software and Affected Versions Elegant Themes Divi theme for WordPress affected versions not specified Description A directory traversal issue exists in the Elegant Themes Divi theme for WordPress, allowing remote attackers to read arbitrary files. This is achieved by...

Users Ultra <= 1.4.35 - SQL Injection

The AJAX action ‘editphotocate’, which is defined in the file ‘users-ultra/addons/photocategories/admin/admin.php’, allows for SQL Injection via the POST parameter ‘cateid’. This parameter is used in a call to the WordPress function ‘$wpdb-getresults’ without being sanitized. This action is...

Magento Server MAGMI Plugin - Multiple Vulnerabilities

Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLocal file inclusion :...

SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS)

Ajax Timeline module enables you to display a vertical timeline of nodes based off a date field or created date of the configured nodes. The module doesn't sufficiently escape node titles when displaying the timeline, allowing a malicious user to inject code. This vulnerability is mitigated by th...

Revive Old Post <= 6.9.0 - Privilege Escalation

Leveraging a publicly accessible AJAX function named ‘updateresponse’, it is possible to update any option with the WordPress installation. Using this vulnerability, it is possible to gain administrative access to the WordPress installation by updating the options ‘defaultrole’ and...

WordPress Calls to Action Plugin <= 2.2.7 - Stored XSS

Unauthenticated users can update the content of any specific form on the site by the AJAX action "inboundformsave". Solution Update the plugin...

Vulnerability alert: well-known WordPress theme Pagelines and Platform the presence of high-risk vulnerabilities-vulnerability warning-the black bar safety net

Use the Pagelines and Platform themes for WordPress users, please update the theme version. We at once on WAF routine audit, accidentally discovered two serious vulnerabilities: a privilege elevation vulnerability affecting the Pagelines and Platform, as well as a remote code execution...

LebiShop商城系统最新版SQL注入五

简要描述： LebiShop商城系统最新版SQL注入五 详细说明： LebiShop商城系统最新版SQL注入一处 文件Shop.supplier.Ajax.Ajaxproduct // Shop.supplier.Ajax.Ajaxproduct public void ProductBatchPriceUpdate if !base.Power"supplierproductbatchprice", "批量调价" base.AjaxNoPower; return; string step = RequestTool.RequestString"step"; string dateFro...

CVE-2015-1175

Cross-site scripting XSS vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layeredpriceslider parameter...

SA-CONTRIB-2015-024 - Alfresco - Cross Site Request Forgery (CSRF)

The Alfresco module provides integration between Drupal and Alfresco via Content Management Web Services SOAP and Repository RESTful API. The Alfresco Browser submodule provides an AJAX-based repository browser that allows users to visualize, upload, search and retrieve nodes from the Alfresco...