2734 matches found
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...
WordPress NativeChurch / lote27 / FR0_theme / acento File Download
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress NativeChurch theme Arbitrary File Download Vulnerability Author : alieye Vendor Homepage : http://themeforest.net/item/nativechurch-multi-purpose-wordpress-theme/7082446...
WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability Google Dork: Index of /wp-content/plugins/kbslider Date: 2014-08-21 Exploit Author: MF0x and Daniel Pentest Vendor Homepage:...
MEHR Automation System Arbitrary File Download
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : MEHR Automation System Arbitrary File Download Vulnerabilitypersian portal Author : alieye vendor : http://shakhesrayane.ir/ Contact : [email protected] Risk : High Class: Remote Google Dork: intext:"[email protected]"...
WordPress KenBurner Slider Arbitrary File Download
Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability Google Dork: Index of /wp-content/plugins/kbslider Date: 2014-08-21 Exploit Author: MF0x and Daniel Pentest Vendor Homepage: http://codecanyon.net/item/responsive-kenburner-slider-jquery-plugin/1633038 Version...
KenBurner Slider - Unauthenticated Arbitrary File Download
The WordPress Plugin called KenBurner Slider suffers from Arbitrary File Download Vulnerability, which could allow an attacker to download the wp-config.php file and others. This issue has been spotted being exploited in the wild. PoC...
WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download
source: https://www.securityfocus.com/bid/69387/info The KenBurner Slider plugin for WordPress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information...
WordPress Slider Revolution Arbitrary File Download Vulnerability
WordPress Slider Revolution is prone to an arbitrary file download vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wordpress Slider Revolution Responsive <= 4.1.4 Arbitrary File Download
Exploit for php platform in category web applications Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium...
逐浪CMS 任意文件下载+任意文件删除（无需登录）
简要描述： 逐浪最新版 任意文件删除 任意文件下载 详细说明： 在此请求逐浪cms 重视每个白帽子提交的漏洞 不要老是漏洞忽略 地址 http://demo.zoomla.cn/USER/Develop%5CSiteAdmin/BackupSite.aspx 源码如下 protected void PageLoadobject sender, EventArgs e this.MU = this.BU.GetLogin; if base.Request.QueryString"status" == "del" //任意文件删除...
InFocus - Arbitrary File Download
The infocus WordPress theme was affected by an Arbitrary File Download security vulnerability...
PHPYun 3.1 /weixin/model/index.class.php 任意文件下载漏洞
No description provided by source...
WordPress Slider Revolution Responsive 4.1.4 File Download
 Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index of" Date ...
Plesk Sitebuilder XSS / Bypass / Shell Upload / File Download
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...
FengCMS 1.23 /app/controller/downController.php 任意文件下载漏洞
No description provided by source...
Fengcms 最新版v1.24任意文件下载(绕过过滤)
简要描述： 之前fengcms修复了好几次这个问题，但依旧知识不对。不过到我这个应该就终结了，我会给出好的解决方案。这也不是厂商的问题，如果不是专门搞安全的人也很难考虑到这一点。 多说一句，fengcms送的礼物已经收到了，再次感谢！这种厂商要奖励，很负责！！ 官方给出的测试站已经升到最新版了，我这里测试通过，已经可以下载config.php。 详细说明： /app/controller/downController.php： class downController extends Controller public function index...
TFTPD32 2.50 Arbitrary File Download/Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files...
mybackup 1.4.0 (afd/rfi) Multiple Vulnerabilities
No description provided by source. + MyBackup 1.4.0 Remote File Inclusion AFD/RFI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download Script : http://www.tufat.com/fileslgpl/script96.zip + Arbitrary File Download - PoC...
Cart32 6.x GetImage Arbitrary File Download Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25928/info Cart32 is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the...
orbis cms 1.0 (afd/adf/asu/sql) Multiple Vulnerabilities
No description provided by source. + Orbis CMS 1.0 AFD/ADF/ASU/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Dork : Powered by Orbis CMS + Download script : http://www.novo-ws.com/orbis-cms/download.shtml + Arbitrary File Download + -...