KC-Wiki 1.0 /minimal/wiki.php 任意文件下载漏洞

No description provided by source...

对北京致远协创软件有限公司官方网站的一次渗透性测试

简要描述： 能不能积极确认漏洞，别总忽略！还能不能玩耍了！O∩∩O哈哈 详细说明： 由任意文件下载到读取数据库配置文件 查看伪静态文件 http://www.seeyon.com/.htaccess phpinfo http://www.seeyon.com/phpinfo.php 物理路径泄露 http://www.seeyon.com/inc/db.php 漏洞证明： 任意文件下载读取数据库配置文件 http://www.seeyon.com/downfile.php?file=/../inc/conn.php seeyon用户允许远程连接，利用navicat链接，成功控制数据库...

WordPress Slider Revolution Arbitrary File Download Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Slider Revolution Plugin <= 4.1.4 - Arbitrary File Download

WordPress Slider Revolution plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/27513...

WordPress Plugin aspose-doc-exporter 1.0 - Arbitrary File Download

WordPress Plugin aspose-doc-exporter 1.0 - Arbitrary File Download |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress aspose-doc-exporter Plugin Arbitrary File Download Vulnerability | | +...

WordPress Aspose.Words Exporter plugin 1.0 - Arbitrary File Download

WordPress Aspose.Words Exporter plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index...

Aspose Importer & Exporter 1.0 - Arbitrary File Download

The Aspose Importer & Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WordPress Aspose Importer & Exporter Plugin <= 1.0 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download

The Aspose.Words Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability. The asposedocexporterdownload.php file of the plugin does not restrict access, check permission or validate the file parameter, allowing unauthenticated user to download any file from the...

WordPress Aspose PDF Exporter Plugin <= 1.9 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

WordPress Aspose Cloud eBook Generator File Download Vulnerability

WordPress Aspose Cloud eBook Generator plugin suffers from an arbitrary file download vulnerability. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress Aspose-Cloud-eBook-Generator Plugin...

Aspose PDF Exporter - Arbitrary File Download

The Aspose.PDF Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WordPress Aspose Cloud eBook Generator File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress Aspose-Cloud-eBook-Generator Plugin Arbitrary File Download Vulnerability | | + Exploit Author: Ashiyane Digital Security Team | | + Vendor...

WordPress Marketplace 2.4.0 Arbitrary File Download

Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download Date: 26-10-2014 Software Link: https://wordpress.org/plugins/wpmarketplace/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps CVE: CVE-2014-9013 and CVE-2014-901...

WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download

WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download Date: 26-10-2014 Software Link: https://wordpress.org/plugins/wpmarketplace/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

WordPress Marketplace Plugin 2.4.0 - Arbitrary File Download

Marketplace plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download

Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download Date: 26-10-2014 Software Link: https://wordpress.org/plugins/wpmarketplace/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps CVE: CVE-2014-9013 and CVE-2014-901...

Wordpress WP Marketplace 2.4.0 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Marketplace 2.4.0 Arbitrary File Download Date: 26-10-2014 Software Link: https://wordpress.org/plugins/wpmarketplace/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...