WP Mobile Edition <= 2.2.7 - Remote File Disclosure

The plugin is not filtering data in GET parameter 'files' in file 'themes/mTheme-Unus/css/css.php' http://www.example.com/wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php...

WordPress WP Mobile Edition Plugin 2.7 - Remote File Disclosure

WP Mobile Edition plugin's "get" parameter is prone to a remote file disclosure vulnerability via "themes/mTheme-Unus/css/css.php". Solution Upgrade the plugin...

WordPress Fusion Engage Local File Disclosure Vulnerability

WordPress Fusion Engage plugin suffers from a local file disclosure vulnerability. Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant...

WordPress Fusion Engage Plugin <= 1.0.5 - Local File Disclosure

This plugin is prone to a local file disclosure vulnerability. Solution Update the plugin...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. PoC curl --data "action=fegetsvhtml=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. curl --data "action=fegetsvhtml&video=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Local File Disclosure

Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant code.. function fegetsvhtml global $wpdb, $videodb, $anndb;...

TP-LINK Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested versions...

Debian Security Advisory DSA 3218-1 (wesnoth-1.10 - security update)

Ignacio R. Morelle discovered that missing path restrictions in the Battle of Wesnoth game could result in the disclosure of arbitrary files in the user OpenVAS Vulnerability Test $Id: deb3218.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3218-1 using nvtgen 1.0 Scrip...

SUSE-SU-2015:0787-1 Security update for rubygem-sprockets-2_11

This update for rubygem-sprockets-211 provides the following security fix: Arbitrary file existence disclosure bnc903658, CVE-2014-7819 Security Issues: CVE-2014-7819...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Local File Disclosure

The MP3-jPlayer WordPress plugin was affected by a Local File Disclosure security vulnerability...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3-Jplayer 2.1 Local File Disclosure

Dx . Made In Algeria . xZ Title : WordPress plugin mp3-jplayer v2.3 Local File Disclosure Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Disclosure 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

Codiad 2.5.3 - LFI Vulnerability

Exploit for php platform in category web applications +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure

A hook is added to ‘init’ in the file ‘miwoftp/miwoftp.php’. This hook is triggered whenever a user visits the front end of the site. The function specified in this hook will proceed to allow the user to download a file within the scope of the home directory of the site. Various values from the G...

WordPress Miwo FTP Plugin <= 1.0.4 - Arbitrary File Disclosure

Because of this vulnerability, users can download a file within the scope of the home directory of the site. Solution Update this plugin...

IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure

The IP Blacklist Cloud plugin exposes several AJAX functions to users. One of these is the ‘importCSVIPCloud’ action, which looks to be used to import CSV files into the systems blacklist. This action is susceptible to Directory Traversal, and does not check file extensions, as such it is possibl...