WordPress Plugin WP Mobile Edition 2.7 - Remote File Disclosure

WordPress Plugin WP Mobile Edition 2.7 - Remote File Disclosure Exploit Title: Wordpress Plugin 'WP Mobile Edition' Remote File Disclosure Vulnerability Date: April 11, 2015 Exploit Author: @LookHin Khwanchai Kaewyos Google Dork: inurl:?fdxswitcher=mobile Vendor Homepage:...

WordPress Fusion Engage Local File Disclosure Vulnerability

WordPress Fusion Engage plugin suffers from a local file disclosure vulnerability. Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant...

Debian Security Advisory DSA 3218-1 (wesnoth-1.10 - security update)

Ignacio R. Morelle discovered that missing path restrictions in the Battle of Wesnoth game could result in the disclosure of arbitrary files in the user OpenVAS Vulnerability Test $Id: deb3218.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3218-1 using nvtgen 1.0 Scrip...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. PoC curl --data "action=fegetsvhtml=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Local File Disclosure

Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant code.. function fegetsvhtml global $wpdb, $videodb, $anndb;...

TP-LINK Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested versions...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. curl --data "action=fegetsvhtml&video=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Plugin <= 1.0.5 - Local File Disclosure

This plugin is prone to a local file disclosure vulnerability. Solution Update the plugin...

SUSE-SU-2015:0787-1 Security update for rubygem-sprockets-2_11

This update for rubygem-sprockets-211 provides the following security fix: Arbitrary file existence disclosure bnc903658, CVE-2014-7819 Security Issues: CVE-2014-7819...

WordPress MP3-Jplayer 2.1 Local File Disclosure

Dx . Made In Algeria . xZ Title : WordPress plugin mp3-jplayer v2.3 Local File Disclosure Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Disclosure 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Local File Disclosure

The MP3-jPlayer WordPress plugin was affected by a Local File Disclosure security vulnerability...

Codiad 2.5.3 - LFI Vulnerability

Exploit for php platform in category web applications +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure

A hook is added to ‘init’ in the file ‘miwoftp/miwoftp.php’. This hook is triggered whenever a user visits the front end of the site. The function specified in this hook will proceed to allow the user to download a file within the scope of the home directory of the site. Various values from the G...

WordPress Miwo FTP Plugin <= 1.0.4 - Arbitrary File Disclosure

Because of this vulnerability, users can download a file within the scope of the home directory of the site. Solution Update this plugin...

WordPress IP Blacklist Cloud Plugin <= 3.42 - Arbitrary File Disclosure

This plugin is prone to an arbitrary file disclosure vulnerability. It allows an user with adequate access to the WordPress instance to read files on the system and potentially compromising further credentials such as FTP, MySQL, amongst other sensitive information. Solution Upgrade the plugin...

IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure

The IP Blacklist Cloud plugin exposes several AJAX functions to users. One of these is the ‘importCSVIPCloud’ action, which looks to be used to import CSV files into the systems blacklist. This action is susceptible to Directory Traversal, and does not check file extensions, as such it is possibl...