1624 matches found
WordPress Download Manager 2.7.2 - Privilege Escalation Vulnerability
WordPress Download Manager plugin version 2.7.2 suffers from a privilege escalation vulnerability. Exploit Title: WordPress Download Manager 2.7.2 Privilege Escalation Date: 24-11-2014 Software Link: https://wordpress.org/plugins/download-manager/ Exploit Author: Kacper Szurek Contact:...
WordPress Download Manager 2.7.2 Privilege Escalation
Exploit Title: WordPress Download Manager 2.7.2 Privilege Escalation Date: 24-11-2014 Software Link: https://wordpress.org/plugins/download-manager/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps CVE: CVE-2014-9260 1...
WordPress Download Manager Privilege Escalation
Privilege escalation vulnerability in WordPress Download Manager plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Wordpress Download Manager 2.7.4 /wp-content/plugins/download-manager/wpdm-core.php code execution vulnerability
No description provided by source...
GetGo Download Manager HTTP Response Buffer Overflow Exploit
Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'GetGo Download Manager HTTP Response Buffer Overflow', 'Description' = %q...
CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting
The lack of CSRF check and sanitisation could allow attackers to perform CSRF attacks against logged in administrators, and set a Cross-Site Scripting payload via addonstitle parameter in the CMDMadminsettings page...
GetGo Download Manager HTTP Response Buffer Overflow
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'GetGo Download Manager HTTP Response Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow...
Wordpress Download Manager 2.7.4 - Remote Code Execution Vulnerability
Exploit for php platform in category web applications !/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit writt...
WordPress Download Manager 2.7.4 - Remote Code Execution
Download Manager plugin is prone to a remote code execution vulnerability via "/download-manager/wpdm-core.php". It allows attackers to execute arbitrary PHP code. Solution Upgrade the plugin...
WordPress Plugin Download Manager 2.7.4 - Remote Code Execution
WordPress Plugin Download Manager 2.7.4 - Remote Code Execution !/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html...
WordPress Plugin Download Manager 2.7.4 - Remote Code Execution
!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...
WordPress Download Manager 2.7.4 Remote Command Execution
!/usr/bin/python Exploit Name: Wordpress Download Manager 2.7.0-2.7.4 Remote Command Execution Vulnerability discovered by SUCURI TEAM http://blog.sucuri.net/2014/12/security-advisory-high-severity-wordpress-download-manager.html Exploit written by Claudio Viviani 2014-12-03: Discovered...
Wordpress Download Manager (download-manager) Unauthenticated File Upload
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Download Manager download-manager Unauthenticated File Upload', 'Description' = %q The WordPress download-manager plugin...
Wordpress CM Download Manager 2.0.0 /lib/controllers/CMdownloadController.php 代码执行漏洞
The code injection vulnerability has been found and confirmed within the software as an anonymous user. A successful attack could allow an anonymous attacker gains full control of the application and the ability to use any operating system functions that are available to the scripting environment...
Download Manager <= 2.7.4 - Code Execution / Remote File Inclusion
The WordPress Download Manager WordPress plugin was affected by a Code Execution / Remote File Inclusion security vulnerability...
Wordpress Download Manager (download-manager) Unauthenticated File Upload
The WordPress download-manager plugin contains multiple unauthenticated file upload vulnerabilities which were fixed in version 2.7.5. Module Options msf use exploit/unix/webapp/wp/downloadmanagerupload msf undefineddownloadmanagerupload show actions ...actions... msf undefineddownloadmanageruplo...
WordPress CM Download Manager 2.0.6 XSS / CSRF
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: WordPress plugin cm-download-manager Plugin page: https://wordpress.org/plugins/cm-download-manager/ Vendor: CreativeMindsSolutions http://cminds.com/ Vulnerability Type: CWE-79: Cross-site scripting Vulnerable Versions: 2.0.6 and below Fixed...
CVE-2014-8877 - Code Injection in Wordpress CM Download Manager plugin
Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product: https://wordpress.org/plugins/cm-download-manager/ Affected version: 2.0.0 and previous version Fixed version:...
WordPress Download Manager Plugin <= 2.0.6 - Multiple CSRF and XSS
Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting attacks. Solution Update the plugin...