1542 matches found
UBUNTU-CVE-2014-5240
Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...
CVE-2014-5240
Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...
CVE-2014-5240
Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...
User Avatar 1.3.7 - shell upload
The User Avatar WordPress plugin was affected by a shell upload security vulnerability...
Atom CMS Shell Upload / SQL Injection / Bypass Vulnerabilities
Atom CMS suffers from remote shell upload and remote SQL injection vulnerabilities. Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradul...
Atom CMS Shell Upload / SQL Injection
Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradula and Harry //////////////////////// /// Overview: //////////////////////// Atom CMS...
finecms 最新版v2.3.3前台getshell
简要描述： 不指望厂商确认，我就是要打脸。官方认为自己已经修复的很干净了，在我看来还是一点用处都没有。wooyun官方能不能给我都补个rank，毕竟找了好几个getshell了。 'DRNAME' = '海豚大众版', 'DRUPDATE' = '2014.6.21', 'DRVERSION' = '2.3.3', 'DRVERSIONID' = 20 详细说明： 还是头像上传的地方，官方认为自己已经修复的很干净了，在我看来还是一点用处都没有。 不过demo站直接把头像上传的功能给阉割了，正常头像都没法上传了，所以我就不在demo上测试了，下载最新的v2.3.3，本地测试。 版本号：...
CH-CMS.ch-V2 Upload Vulnerability
No description provided by source. ======================================================================================== | Title CH-CMS.ch-V2 Upload Vulnerability | Author El-Kahina | email please forgive me $ | Web Site http://kewlshare.com/dl/f1b6b4d587ab/95Final2bugfixinstall.rar.html $ |...
Zero CMS 1.0 - Alpha Arbitrary File Upload / SQL Injection Vulnerabilities
No description provided by source. | | | / | |\ \ / | / |/ | | | | |/ \ | | / \ \ | \ \ | | | | | \ | |/ \ | | // | || | | | ||| /| / /\ | |||| | | /| / / | | Zero CMS Remote Arbitrary File Upload / SQL Injections | | Version: = 1.0 Alpha Last | | Vendor: www.zero-cms.com | | Discovered by:...
PHP-Nuke 5.x/6.0 Avatar HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6750/info A problem with PHP-Nuke could allow remote users to execute arbitrary code in the context of the web site. The problem is in the lack of sanitization of some types of input. PHP-Nuke does not sanitize code...
Simple Machines Forum (SMF) <= 1.1.8 - (avatar) Remote PHP File Execute PoC
No description provided by source...
PHP-Fusion <= 6.00.306 Multiple Vulnerabilities Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPFusion = v6.00.306 avatar modmime arbitrary file upload &\r\n; echo local inclusion vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc6 echo Usage: p...
phpBB <= 2.0.20 (Admin/Restore DB/default_lang) Remote Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PhpBB = v2.0.20 \Admin/Restore Database/defaultlang remote commands execution\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo - you need an admin sid, works regardless of...
phpTournois <= G4 Remote File Upload/Code Execution Exploit
No description provided by source. ?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles real F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we ar...
WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
phpBB <= 2.0.21 (Poison NULL Byte) Remote Exploit
No description provided by source. !/usr/bin/perl -w Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NULL byte...
XennoBB 1.0.5/1.0.6/2.1/2.2 Profile.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19446/info XennoBB is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...
Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability
No description provided by source. !===========================================================================! Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date : 18...
Youyax 包含漏洞一枚。
简要描述： 过滤不严。 详细说明： 在org/youyax.php中 private function deal$tp if isset$COOKIE'youyaxlang' $this-lang = require"lang/" . $COOKIE'youyaxlang' . "/lang.php"; $this-arrayarray'lang' = $this-lang; else 这里$COOKIE'youyaxlang'可控 然后看到了包含中。 然后截断掉后面的lang.php 就可以包含任意文件了。 漏洞证明： 我直接在根目录下新建一个1.jpg 内容为phpinfo...
