3254 matches found
BlackCat CMS 1.1.1 Arbitrary File Download
Exploit Title: BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability Date: 2015/06/16 Vendor Homepage: http://blackcat-cms.org/ Software Link: http://blackcat-cms.org/temp/packetyzer/blackcatcms2fo3PXdKj1.zip Version: v1.1.1 Tested on: Centos 6.5,PHP 5.4.41 Category: webapps Description...
WordPress NativeChurch Theme 1.0 / 1.5 Arbitrary File Download
Exploit Title: Wordpress Theme NativeChurch - Arbitrary File Download Google Dork: inurl:"/wp-content/themes/NativeChurch/" Date: 13/6/2015 Exploit Author: Arash Khazaei Vendor Homepage: http://support.imithemes.com/forums/forum/html-templates/native-church/ Software Link: N/A Version: 1.0-1.5...
WordPress History Collection 1.1.1 Arbitrary File Download
Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1 Tested on: Linux I-Description: Wordpress history...
Zip Attachments <= 1.1.4 - Arbitrary File Download
The zip-attachments plugin allows arbitrary file downloads because it does not check the download path of the requested file. http://www.example.com/wp-content/plugins/zip-attachments/download.php?zafile=../../../../../etc/passwd&zafilename=passwd...
WordPress History Collection <=1.1.1 Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1...
WordPress History Collection Plugin <= 1.1.1 - Arbitrary File Download
History Collection plugin is prone to an arbitrary file download vulnerability. "download.php" is not filtering the "get" input and the file can be downloaded because of this "get" input value. Solution Update the plugin...
WordPress Plugin History Collection 1.1.1 - Arbitrary File Download
WordPress Plugin History Collection 1.1.1 - Arbitrary File Download Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/...
Bonita BPM Path Traversal Vulnerability
Bonita BPM is an open source business process management - workflow suite. A path traversal vulnerability exists in Bonita BPM. Since the input passed to the "bonita/portal/themeResource" URL via the "theme" and "location" HTTP GET parameters is not properly validated as part of the used filename...
WordPress Plugin History Collection 1.1.1 - Arbitrary File Download
Exploit Title: Wordpress History Collection =1.1.1 Arbitraty File Download Google Dork: inurl:plugins/history-collection Date: 10/06/2015 Exploit Author: Kuroi'SH Software Link: https://wordpress.org/plugins/history-collection/ Version: =1.1.1 Tested on: Linux I-Description: Wordpress history...
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk 14.4 - Multiple Vulnerabilities Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated:...
Cisco Unified MeetingPlace Arbitrary File Download Vulnerability
Cisco Unified MeetingPlace is the United States Cisco Cisco company's set of multimedia conferencing solutions. The solution provides a user environment that integrates voice, video and Web conferencing. An arbitrary file download vulnerability exists in Cisco Unified MeetingPlace. An attacker is...
WordPress Estrutura-Basica theme 'download.php' arbitrary file download vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Estrutura-Basica is one of the basic structure themes. An arbitrary file download vulnerability exists in the WordPres...
SysAid Help Desk Arbitrary File Download
This module exploits two vulnerabilities in SysAid Help Desk that allows an unauthenticated user to download arbitrary files from the system. First, an information disclosure vulnerability CVE-2015-2997 is used to obtain the file system path, and then we abuse a directory traversal CVE-2015-2996 ...
WordPress Simple Backup plugin 'tools.php' arbitrary file download vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress Simple Backup plugin. An attacker exploits this vulnerability to download arbitrary files in the context of a web...
Wordpress Theme Nevada Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Theme Nevada Arbitrary File Download Vulnerability Date: 01/05/2015 Exploit Author: X-Line Vendor Homepage: http://themeforest.unitedthemes.com/wpversions/nevada/ Contact : http://www.root-me.org/X-Line-24646 Tested on...
WordPress Simple Backup Plugin <= 2.7.10 - Arbitrary File Download
This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...
DataPortal /Ashx/GetPage.ashx 任意文件下载漏洞
No description provided by source...
Simple Backup <= 2.7.10 - Arbitrary File Download
The simple-backup WordPress plugin was affected by an Arbitrary File Download security vulnerability...