WordPress AllWebMenus Plugin < 1.1.9 - Arbitrary File Upload

AllWebMenus plugin is prone to a arbitrary file upload vulnerability that occurs because the application fails to adequately clean up user-supplied input. Lack of checks in script actions.php allows an attacker to upload upload any file to the vulnerable server. Other attacks are also possible...

WordPress Plugin AllWebMenus 1.1.9 Menu Plugin - Arbitrary File Upload

WordPress Plugin AllWebMenus 1.1.9 Menu Plugin - Arbitrary File Upload Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload Version: Compress it with zip to awm.zip Use this form to upload the php file to the server Version 1.1.8 also checks the source referrer, so you have to u...

WordPress Plugin AllWebMenus < 1.1.9 Menu Plugin - Arbitrary File Upload

Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload Version: Compress it with zip to awm.zip Use this form to upload the php file to the server Version 1.1.8 also checks the source referrer, so you have to use scripting language or spoof it in another way to set the HTTPREFERER...

WordPress AllWebMenus Plugin 'abspath' Parameter Remote File Include Vulnerability

The AllWebMenus plug-in for WordPress is prone to a remote file- include vulnerability because it fails to sufficiently sanitize user- supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2011-3981

CVE-2011-3981 affects WordPress AllWebMenus Plugin 1.1.3. The AllWebMenus plugin is vulnerable to a PHP remote file inclusion via the abspath parameter in actions.php, due to insufficient input sanitization, allowing attempted arbitrary PHP code execution. This aligns with multiple sources (NVD/N...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

PT-2011-4793

Name of the Vulnerable Software and Affected Versions Allwebmenus plugin version 1.1.3 for WordPress Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the actions.php file. Recommendations For Allwebmenus plugin version 1.1.3, avoid...

CVE-2011-3981: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

WordPress AllWebMenus 1.1.3 Remote File Inclusion

Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress AllWebMenus Plugin 1.1.3 - Remote File Inclusion

AllWebMenus plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Update the plugin...

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software...

AllWebMenus 1.1.3 - Remote File Inclusion

The AllWebMenus WordPress Menu Plugin WordPress plugin was affected by a Remote File Inclusion security vulnerability...

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion

Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress AllWebMenus Plugin 1.1.3 Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link...