wp-instance-rename <= 1.0 - Arbitrary File Download

The wp-instance-rename WordPress plugin was affected by an Arbitrary File Download security vulnerability. PoC url --data "dbname=wp=/etc/passwdfolder=." http://www.example.com/wp-instance-rename/mysqldumpdownload.php -o p.zip...

WordPress Revslider 4.2.2 XSS / Information Disclosure Vulnerabilities

WordPress Revslider plugin version 4.2.2 suffer from cross site scripting, file download, and information disclosure vulnerabilities. Note that this finding houses site-specific data. | Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork :...

BlackCat CMS 1.1.1 Arbitrary File Download Vulnerability

BlackCat CMS version 1.1.1 suffers from an arbitrary file download vulnerability. Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip...

BlackCat CMS 1.1.1 - Arbitrary File Download

Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...

BlackCat CMS 1.1.1 - Arbitrary File Download

BlackCat CMS 1.1.1 - Arbitrary File Download Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,P...

BlackCat CMS 1.1.1 Arbitrary File Download

Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...

WordPress NativeChurch Theme 1.0 / 1.5 Arbitrary File Download

Exploit Title: Wordpress Theme NativeChurch - Arbitrary File Download Google Dork: inurl:"/wp-content/themes/NativeChurch/" Date: 13/6/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://support.imithemes.com/forums/forum/html-templates/native-church/ Software Link: N/A Version: 1.0-1.5...

Zip Attachments <= 1.1.4 - Arbitrary File Download

The zip-attachments plugin allows arbitrary file downloads because it does not check the download path of the requested file. http://www.example.com/wp-content/plugins/zip-attachments/download.php?zafile=../../../../../etc/passwd&zafilename=passwd...

WordPress History Collection 1.1.1 Arbitrary File Download

Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1 Tested on: Linux I-Description: Wordpress history...

WordPress History Collection <=1.1.1 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1...

WordPress Plugin History Collection 1.1.1 - Arbitrary File Download

WordPress Plugin History Collection 1.1.1 - Arbitrary File Download Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/...

WordPress Plugin History Collection 1.1.1 - Arbitrary File Download

Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1 Tested on: Linux I-Description: Wordpress history...

WordPress History Collection Plugin <= 1.1.1 - Arbitrary File Download

History Collection plugin is prone to an arbitrary file download vulnerability. "download.php" is not filtering the "get" input and the file can be downloaded because of this "get" input value. Solution Update the plugin...

SysAid Help Desk 14.4 - Multiple Vulnerabilities

SysAid Help Desk 14.4 - Multiple Vulnerabilities Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated:...

Bonita BPM Path Traversal Vulnerability

Bonita BPM is an open source business process management - workflow suite. A path traversal vulnerability exists in Bonita BPM. Since the input passed to the "bonita/portal/themeResource" URL via the "theme" and "location" HTTP GET parameters is not properly validated as part of the used filename...

Cisco Unified MeetingPlace Arbitrary File Download Vulnerability

Cisco Unified MeetingPlace is the United States Cisco Cisco company's set of multimedia conferencing solutions. The solution provides a user environment that integrates voice, video and Web conferencing. An arbitrary file download vulnerability exists in Cisco Unified MeetingPlace. An attacker is...

WordPress Estrutura-Basica theme 'download.php' arbitrary file download vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Estrutura-Basica is one of the basic structure themes. An arbitrary file download vulnerability exists in the WordPres...

SysAid Help Desk Arbitrary File Download

This module exploits two vulnerabilities in SysAid Help Desk that allows an unauthenticated user to download arbitrary files from the system. First, an information disclosure vulnerability CVE-2015-2997 is used to obtain the file system path, and then we abuse a directory traversal CVE-2015-2996 ...

WordPress Simple Backup plugin 'tools.php' arbitrary file download vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress Simple Backup plugin. An attacker exploits this vulnerability to download arbitrary files in the context of a web...

Wordpress Theme Nevada Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Nevada Arbitrary File Download Vulnerability Date: 01/05/2015 Exploit Author: X-Line Vendor Homepage: http://themeforest.unitedthemes.com/wpversions/nevada/ Contact : http://www.root-me.org/X-Line-24646 Tested on...