WordPress Revolution Slider Local File Disclosure Vulnerability

WordPress Revolution Slider plugin suffers from a local file disclosure vulnerability. Note that this finding houses site-specific data. + Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage:...

WordPress RedSteel Theme File Disclosure

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress RedSteel Theme Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/RedSteel | | Date : Date: 2015-01-25 | | Exploit...

WordPress Revolution Slider Local File Disclosure

Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage: https://wordpress.org/plugins/patch-for-revolution-slider/ + Tested on: windows 7 / firefox , kali linux / firefox + Vulnerable Files: /plugins/revolution-slider/ + Dork : "Index of"...

Cisco Unified Communications Manager File Disclosure Vulnerability

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A file disclosure vulnerability exists in Cisco Unified Communications Manager because it fails to adequately filter user-supplied input. An attacker could exploit this vulnerability to obtain...

Sympa File Disclosure Vulnerability

Sympa is an extensible and highly customizable mailing list software. Sympa suffers from a file disclosure vulnerability due to the program failing to adequately filter user-supplied input. An attacker can exploit this vulnerability to access sensitive information stored in arbitrary files...

SysAid < 14.4.2 Arbitrary File Disclosure Vulnerability

SysAid On-Premise is prone to an arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

嘉缘人才系统最新版注入（无视防御）

简要描述： rt 详细说明： 看到\member\personinterview.php if$do=='del' $checks=$POST'checks'; $db -query"delete from $cfg'tbpre'myinterview where ipmember='$username' and iid in $checks"; showmsg'删除成功！',"?m=personinterview&show=$show",0,2000;exit; 由上面的代码可以看出来，$checks直接进入了sql中，而且没有单引号。...

WordPress Slider Revolution Responsive File Disclosure

File disclosure vulnerability in WordPress Slider Revolution Responsive plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Cart66 Pro <= 1.5.3 - Authenticated Arbitrary File Disclosure

Ability to change settings with a registered non-admin user allows us to trigger an Arbitrary File Disclosure vulnerability with any path of our choosing. One limitation with this vulnerability is that the target user in the PoC, ‘test’ needs to have an account on the Cart66 installation...

WordPress RevSlider Local File Disclosure

Exploit Title: Wordpress RevSlider Plugin LFD Google Dork: inurl:/admin-ajax.php?action=revslidershowimage Date: 12/29/14 Exploit Author: FarbodEZRaeL Vendor Homepage: iranhack.org Software Link: wordpress.org Tested on: windows Exploit: Exploits Wordpress...

WordPress Sell Downloads Plugin <= 1.0.1 - Arbitrary File Disclosure

Because of this vulnerability, attackers can download arbitrary files from site, under the context of the web server. Solution Upgrade the plugin...

VP-2014-004 SysAid Server Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: 14.4.2 Product Website: http://www.sysaid.com/product/sysaid Author: Bernhard...

SysAid Server Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

WordPress Themes download.php File Disclosure

!/usr/bin/php -q ?php =============================================================================== NAME: Wordpress A.F.D Verification/ INURL - BRASIL TIPE: Arbitrary File Download Tested on: Linux EXECUTE: php exploit.php www.target.gov.us OUTPUT: WORDPRESAFD.txt AUTOR: Cleiton Pinheiro / NICK...

SysAid Server - Arbitrary File Disclosure

SysAid Server - Arbitrary File Disclosure Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable...

AMSI 3.20.47 Build 37 File Disclosure

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / / \ | \ \ / // / \ / / / / AMSI v3.20.47 build 37 = Remote File Disclosure Exploit .py My + Author : KnocKout Contact : [email protected] Exploit Developed by : B3mB4m HomePage :...

SysAid Server Arbitrary File Disclosure Vulnerability

SysAid Server is vulnerable to an unauthenticated file disclosure attack that allows an anonymous attacker to read arbitrary files on the system. An attacker exploiting this issue can compromise SysAid user accounts and gain access to important system files. When SysAid is configured to use LDAP...

SysAid Server - Arbitrary File Disclosure

Vantage Point Security Advisory 2014-004 ======================================== Title: SysAid Server Arbitrary File Disclosure ID: VP-2014-004 Vendor: SysAid Affected Product: SysAid On-Premise Affected Versions: Summary: --- SysAid Server is vulnerable to an unauthenticated file disclosure...

VDG Security SENSE 2.3.13 File Disclosure / Bypass / Buffer Overflow

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: VDG Security SENSE formerly DIVA vulnerable version: 2.3.13 fixed version: unknown - no vendor confirmation impact: critical...

TYPO3 Translations.php File Disclosure Vulnerability

TYPO3 is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2014 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:typo3:typo3";...