1614 matches found
Wordpress Download Manager Plugin Arbitrary File Upload (CVE-2008-3362)
An Arbitrary File Upload vulnerability has been reported in Wordpress Download Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2014-8585
Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the fname parameter to 1 views/filedownload.php or 2 filedownload.php...
Directory traversal
Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the fname parameter to 1 views/filedownload.php or 2 filedownload.php...
CVE-2014-8585
Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the fname parameter to 1 views/filedownload.php or 2 filedownload.php...
CVE-2014-8585
CVE-2014-8585 affects the WordPress Download Manager plugin. A directory traversal flaw in fname (via views/file_download.php or file_download.php) allows remote attackers to read arbitrary files. Root cause is improper validation of the fname parameter, enabling access to unintended filesystem p...
WordPress Download Manager Plugin - Arbitrary File Download
Because of this vulnerability, the attackers can read arbitrary files in the "fname" parameter to views/filedownload.php or filedownload.php. Solution Update the plugin...
WordPress Download Manager Arbitrary File Download
WordPress Download Manager Plugin - Arbitrary File Download CWE: CWE-98 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 25/10/2014 Vendor Homepage: https://wordpress.org/plugins/download-manager/ Tested on: Windows 7 and Gnu/Linux Google Dork:...
WP-DownloadManager 1.60 - Script Insertion CSRF
The wp-download-manager WordPress plugin was affected by a Script Insertion CSRF security vulnerability...
WP-Filebase Download Manager 0.3.0.02 - class/Admin.php GetFileHash Function Remote Comm& Execution
The wp-filebase WordPress plugin was affected by a class/Admin.php GetFileHash Function Remote Comm& Execution security vulnerability...
Download Manager <= 2.5.8 - Download Package file Parameter Stored XSS
The WordPress Download Manager WordPress plugin was affected by a Download Package file Parameter Stored XSS security vulnerability...
Download Manager <= 2.2.2 - admin.php cid Parameter XSS
The WordPress Download Manager WordPress plugin was affected by an admin.php cid Parameter XSS security vulnerability...
WordPress Download Manager 2.6.8 Shell Upload
Exploit Title : WordPress Download Manager 2.6.8 Shell Upload Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : www.wpdownloadmanager.com Software Link : http://downloads.wordpress.org/plugin/download-manager.zip Date : 2014-07-11 Tested on : Linux / Mozilla Firefox / WordPress...
Cross site scripting
Cross-site scripting XSS vulnerability in tpls/editmedia.php in the Hot Files: File Sharing and Download Manager wphotfiles plugin 1.0.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mediaid parameter...
CVE-2014-4588
The CVE-2014-4588 entry concerns the WordPress plugin Hot Files: File Sharing and Download Manager (wphotfiles)
Free Download Manager Torrent File Parsing - Multiple Remote Buffer Overflow Vulnerabilities
No description provided by source. $Id: fdmtorrent.rb 7455 2009-11-10 21:52:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
php Download Manager <= 1.1 - Local File Inclusion Vulnerability
No description provided by source. Author : BeyazKurt Contact : [email protected] Script : php Download Manager v1.1 & 1.0 Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=185482 File : include/body.inc.php Code : ?php if fileexists$content...
WordPress WP-Filebase Download Manager plugin <= 0.2.9 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP-Filebase Download Manager plugin = 0.2.9 SQL Injection Vulnerability Date: 2011-09-09 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-filebase.0.2.9.zip Version:...
Akamai Download Manager < 2.2.3.7 ActiveX Remote Download Exploit
No description provided by source. html !-- / Exploit start here, by cocoruderfrankruderathotmail.com For Akamai Download Manager File Download To Arbitrary Location Vulnerability. This exploit will download http://ruder.cdut.net/attach/calc.exe to C:\Documents and Settings\All Users\Start...
Loki Download Manager 2.0 Default.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13898/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'default.asp' script before using it in an SQL...