PT-2015-6937

Name of the Vulnerable Software and Affected Versions GD bbPress Attachments plugin versions prior to 2.3 Description The issue allows remote administrators to include and execute arbitrary local files. This can be achieved by using a .. dot dot in the tab parameter in the "gdbbpress attachments"...

PT-2015-6936

Name of the Vulnerable Software and Affected Versions GD bbPress Attachments plugin versions prior to 2.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the tab parameter in the gdbbpress...

WordPress GD bbPress Attachments 2.1 Cross Site Scripting / Local File Inclusion Vulnerabilities

WordPress GD bbPress Attachments plugin version 2.1 suffers from a cross site scripting and Local File Inclusion Vulnerabilities Details ================ Software: GD bbPress Attachments Version: 2.1 Homepage: http://wordpress.org/plugins/gd-bbpress-attachments/ Advisory report:...

WordPress GD bbPress Attachments 2.1 Local File Inclusion

Details ================ Software: GD bbPress Attachments Version: 2.1 Homepage: http://wordpress.org/plugins/gd-bbpress-attachments/ Advisory report: https://security.dxw.com/advisories/local-file-include-vulnerability-in-gd-bbpress-attachments-allows-attackers-to-include-arbitrary-php-files/ CV...

WordPress GD bbPress Attachments 2.1 Cross Site Scripting

Details ================ Software: GD bbPress Attachments Version: 2.1 Homepage: http://wordpress.org/plugins/gd-bbpress-attachments/ Advisory report: https://security.dxw.com/advisories/reflected-xss-in-gd-bbpress-attachments-allows-an-attacker-to-do-almost-anything-an-admin-can/ CVE: Awaiting...

WordPress GD bbPress Attachments Plugin <= 2.2 - XSS

This vulnerability is in forms/panels.php. It allows an attacker to inject arbitrary web script or HTML via the "tab" parameter that is in the gdbbpressattachments page to wp-admin/edit.php. Solution Update the plugin...

WordPress GD bbPress Attachments Plugin <= 2.2 - Directory Traversal

This vulnerability allows a remote administrator to include and execute arbitrary local files in the "tab" parameter in the gdbbpressattachments page to wp-admin/edit.php. Solution Update the plugin...

rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection

When initialized, the rtMedia will include and instantiate certain classes if BuddyPress is installed. One of these classes is RTMediaActivityUpgrade, contained within the file ‘app/importers/RTMediaActivityUpgrade.php’. This class is instantiated in the file ‘admin/RTMediaAdmin.php,’ line 110, i...

rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection

When initialized, the rtMedia will include and instantiate certain classes if BuddyPress is installed. One of these classes is RTMediaActivityUpgrade, contained within the file ‘app/importers/RTMediaActivityUpgrade.php’. This class is instantiated in the file ‘admin/RTMediaAdmin.php,’ line 110, i...

bbPress - Multiple Script Malformed Input Path Disclosure

The bbPress WordPress plugin was affected by a Multiple Script Malformed Input Path Disclosure security vulnerability...

bbPress - forum.php page Parameter SQL Injection

The bbPress WordPress plugin was affected by a forum.php page Parameter SQL Injection security vulnerability...

bbPress 1.0.2 CSRF Change Admin Password

No description provided by source. : Software : bbPress v 1.0.2 : : site : www.bbpress.org : : date : 29/6/2010 : : Author : saudi0hacker : : Date : May 25, 2010 : : Type : CSRF : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...

BBpress 0.8.1 BB-Login.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24422/info BBpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...

Wordpress bbpress Plugin - Multiple Vulnerabilities

No description provided by source. Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers a...

WordPress bbPress Plugin - Multiple Vulnerabilities

This bbPress plugin is prone to multiple vulnerabilities such as SQL injection, full path disclosure and directory listing vulnerabilities. Solution Update the plugin...

WordPress Plugin bbPress - Multiple Vulnerabilities

WordPress Plugin bbPress - Multiple Vulnerabilities Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all...

WordPress Plugin bbPress - Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers and white hats...

Wordpress Plugin bbpress Multiple Vulnerabilities

Exploit for php platform in category web applications Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : email protected Greetings to all morocca...

WordPress BBPress SQL Injection / Path Disclosure

No description provided by source. Exploit Title: Wordpress plugins - bbpress Multiple Vulnerabilities. Date: 31 August 2012 Author: Dark-Puzzle Souhail Hammou Vendor Website : www.bbpress.ru / www.bbpress.com Risk : Critical Version: All Versions Google Dork : N/A Category: Webapps/0day Tested o...

WordPress BBPress SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...