CVE-2011-1669

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...

Directory traversal

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...

CVE-2011-1669

Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter...

CVE-2011-1669

The CVE-2011-1669 entry corresponds to a directory traversal (Local File Inclusion) vulnerability in the WordPress WP Custom Pages plugin, affecting version 0.5.0.1. According to connected sources, the flaw resides in wp-download.php and allows remote attackers to read arbitrary server files by s...

WordPress WP Custom Pages Plugin 0.5.0.1 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion

WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion

------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://wordpress.org/extend/plugins/wp-custom-pages/ Discove...

WordPress Custom Pages Plugin 0.5.0.1 - Local File Inclusion

This vulnerability can be exploited to include arbitrary files. Solution Update the plugin...

WordPress WP Custom Pages 0.5.0.1 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://wordpress.org/extend/plugins/wp-custom-pages/ Discove...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-6198

SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-6198

CVE-2008-6198 affects the Custom Pages 1.0 plugin for MyBulletinBoard (MyBB). The vulnerability is an SQL injection in pages.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (NVD entry; CVE listing; PRION and CVELIST re...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by&...

mybbcp-sql.txt

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability =============================================================== MyBulletin Board MyBB Plugin "Custom Pages 1.0"...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBB Plugin Custom Pages 1.0 - SQL Injection MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

Custom Pages for Joomla! 'cpage' Parameter Local File Include

The version of the Custom Pages component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'cpage' parameter before using it in the custompages.php script to include PHP code. Regardless of the PHP...

Wordpress All versions XSS

Advisory by Jose Carlos Norte Wordpress is vulnerable to XSS attacks when custom 404 pages are used by the template. The problem sidebar.php: form method="get" id="searchform" action="?php echo $SERVER'PHPSELF'; ?" if wordpress template use custom 404 pages, like: ?php getheader; ? div id="conten...