PT-2018-11113

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to download arbitrary files by manipulating the file and folder URL parameters in the downloadwallpaper.cgi. Recommendations For ASUSTOR ADM version 3.1.1, consider restricting...

CVE-2018-12314: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to download arbitrary files by manipulating the "file" and "folder" URL parameters...

WordPress Pods Plugin Arbitrary File Download Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress Pods plugin. An attacker can exploit the vulnerability to...

WordPress sermon-shortcodes 1.0 Arbitrary File Download

Exploit Title : WordPress sermon-shortcodes 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org sermonmanager.pro...

WordPress wpmu-dev-post-votes plugin database backup arbitrary file download vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress wpmu-dev-post-votes plugin database backup. An attacker can...

WordPress allow-l10n-upload-filename 1.0 Arbitrary File Download

Exploit Title : WordPress allow-l10n-upload-filename 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Low...

WordPress uploadingdownloading-non-latin-filename 1.1.5 Arbitrary File Download

Exploit Title : WordPress uploadingdownloading-non-latin-filename Plugins 1.1.5 Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : wordpress.org/plugins/uploadingdownloading-non-latin-filename/ Softwa...

Joomla Event Booking 3.8.3 Database Disclosure

Exploit Title : Joomla comeventbooking 3.8.3 Components Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/event-booking/ +...

Dream line business enterprise station building system exists arbitrary file download vulnerability

Dream line business enterprise station building system is to use PHP + MySQL way to run the open source station building system. Dream line enterprise building system there are arbitrary file download vulnerability, an attacker can use the vulnerability to download any system file...

WordPress Absolutely Glamorous Custom Admin Plugin <= 6.4.1 Database Backup Arbitrary File Download Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112439";...

WordPress Absolutely Glamorous Custom Admin 6.4.1 Database Disclosure Vulnerability

WordPress Absolutely Glamorous Custom Admin plugin version 6.4.1 suffers from a database disclosure vulnerability. Exploit Title : WordPress Absolutely Glamorous Custom Admin ag-custom-admin Plugin Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from...

WordPress Absolutely Glamorous Custom Admin 6.4.1 Database Disclosure

Exploit Title : WordPress Absolutely Glamorous Custom Admin ag-custom-admin Plugin Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 19/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Catego...

RhinOS Cross-Site Request Forgery Vulnerability

RhinOS is a set of Web development framework . A cross-site request forgery vulnerability exists in RhinOS version 3.0 build 1190. A remote attacker can exploit this vulnerability to download arbitrary files...

EverSync 0.5 - Arbitrary File Download

EverSync 0.5 - Arbitrary File Download Exploit Title: EverSync 0.5 - Arbitrary File Download Dork: N/A Date: 2018-11-14 Exploit Author: Ihsan Sencan Vendor Homepage: https://phpmassmail.sourceforge.io/ Software Link:...

EverSync 0.5 - Arbitrary File Download

Exploit Title: EverSync 0.5 - Arbitrary File Download Dork: N/A Date: 2018-11-14 Exploit Author: Ihsan Sencan Vendor Homepage: https://phpmassmail.sourceforge.io/ Software Link: https://datapacket.dl.sourceforge.net/project/eversync/Downloads/alpha/EverSync-Pre-alpha05.zip Version: 0.5 Category:...

Easyndexer 1.0 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Easyndexer 1.0 - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/easyndexer/ Software Link: https://ayera.dl.sourceforge.net/project/easyndexer/easyndexerwin32.exe Version:...

Easyndexer 1.0 Arbitrary File Download

Exploit Title: Easyndexer 1.0 - Arbitrary File Download Dork: N/A Date: 2018-11-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/easyndexer/ Software Link: https://ayera.dl.sourceforge.net/project/easyndexer/easyndexerwin32.exe Version: 1.0 Category: Webapps Teste...

Easyndexer 1.0 - Arbitrary File Download

Easyndexer 1.0 - Arbitrary File Download Exploit Title: Easyndexer 1.0 - Arbitrary File Download Dork: N/A Date: 2018-11-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/easyndexer/ Software Link:...

Easyndexer 1.0 - Arbitrary File Download

Exploit Title: Easyndexer 1.0 - Arbitrary File Download Dork: N/A Date: 2018-11-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/easyndexer/ Software Link: https://ayera.dl.sourceforge.net/project/easyndexer/easyndexerwin32.exe Version: 1.0 Category: Webapps Teste...

Arbitrary File Download Vulnerability in HDWiki System Backend Database

Interactive Wiki open source system HDwiki is by the interactive online Beijing Technology Co., Ltd. launched a free wiki Wiki building system. HDWiki system background database there are arbitrary file download vulnerability. Attackers can exploit the vulnerability to download the core...