CVE-2022-2392

The CVE-2022-2392 affects the Lana Downloads Manager WordPress plugin up to version 1.8.0. The vulnerability is an authenticated/Contributor+ arbitrary file download, reported to be triggered by supplying a file path via the plugin’s UI and results in a direct download of the chosen file (e.g., w...

PT-2022-16336 · WordPress · Lana Downloads Manager

Name of the Vulnerable Software and Affected Versions: Lana Downloads Manager WordPress plugin versions prior to 1.8.0 Description: The issue allows for an arbitrary file download, which can be exploited by users with Contributor permissions or higher. Recommendations: For versions prior to 1.8.0...

WordPress plugin Lana Downloads Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download

The plugin is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher. PoC As contributor, navigate to https://target/blog/wp-admin/post-new.php?posttype=lanadownload Inside "File URL:" input, fill the file you want to download,...

WordPress Lana Downloads Manager plugin <= 1.7.1 - Authenticated Arbitrary File Download vulnerability

Authenticated Arbitrary File Download vulnerability discovered by Raad Haddad in WordPress Lana Downloads Manager plugin versions = 1.7.1. Solution Update the WordPress Lana Downloads Manager plugin to the latest available version at least 1.8.0...

CVE-2014-8877

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP createfunction...

CVE-2014-8877

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP createfunction...

CVE-2014-8877

CM Downloads Manager for WordPress (CreativeMinds) contains a remote PHP code execution vulnerability (CVE-2014-8877) in the alterSearchQuery function of lib/controllers/CmdownloadController.php. The issue allows an attacker to inject PHP code via the CMDsearch parameter sent to cmdownloads/, whe...

CVE-2014-9129

CM Download Manager (WordPress) before version 2.0.7 is affected by CVE-2014-9129: a CSRF vulnerability allows authenticated admins to be hijacked and stored XSS via the addons_title field on the CMDM_admin_settings page (POST to wp-admin/admin.php). Root cause: insufficient validation/CSRF prote...

PT-2014-8839 · Creative Mind · Cm Download Manager

Name of the Vulnerable Software and Affected Versions: CreativeMinds CM Downloads Manager plugin versions prior to 2.0.7 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS...

SkyPortal Downloads Manager 1.1 - Remote Contents Change Vuln

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal...

CVE-2011-0450

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

Code injection

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

CVE-2011-0450

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

CVE-2011-0450

Opera before 11.01 on Windows is affected by CVE-2011-0450 due to the downloads manager failing to correctly determine the pathname of the filesystem-viewing application. This can allow a user-assisted remote attacker to execute arbitrary code via a crafted web site that hosts an executable file....

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories OPCOM Team | January 28, 2011 Severity Low Affected versions This issue affects Opera for Microsoft Windows. Description Opera’s downloads manager allows users to select a file, and open the...

The wrong executable may be used to display a downloaded file in its folder

Opera's downloads manager allows users to select a file, and open the folder containing that file. This file will be opened using the operating system's file system viewer. In some cases, Opera will use the wrong executable when trying to show the folder view, and that executable may execute code...

SkyPortal Downloads Manager v1.1 Remote Contents Change Vuln

No description provided by source. @=Script :SkyPortal Downloads Manager v1.1 @=S.Site :http://skyportal.net @=Download :http://skyportal.net/downloads/modules/moddownloads11.zip @=Demo :http://vegtrafikk.net @=======================================@ @=Vul: @=http://site.com/ PATH...

SkyPortal Downloads Manager v1.1 Remote Contents Change Vuln

Exploit for unknown platform in category web applications ============================================================ SkyPortal Downloads Manager v1.1 Remote Contents Change Vuln ============================================================ @email protected @=Script :SkyPortal Downloads Manager...

SkyPortal Downloads Manager 1.1 - Remote Contents Change

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal Downloads Manager v1.1 @=S.Site...