6565 matches found
WordPress HB Audio Gallery Lite Plugin 1.0.0 - Arbitrary File Download
HB Audio Gallery Lite plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Upgrade the plugin...
WordPress HB Audio Gallery Lite 1.0.0 Plugin - Arbitrary File Download
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage:...
WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download
WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage:...
WordPress Memphis Document Library Plugin 3.1.5 - Arbitrary File Download
Memphis Document Library plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...
Wordpress RedSteel Theme-download.php任意文件下载漏洞
No description provided by source...
WordPress Memphis Document Library 3.1.5 Plugin - Arbitrary File Download
Exploit for php platform in category web applications Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org...
WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download
Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage: https://fr.wordpress.org/plugins/hb-audio-gallery-lite/ Tested on: MSWin32 Version: 1.0.0...
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...
WordPress HB Audio Gallery Lite 1.0.0 Arbitrary File Download
Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage: https://fr.wordpress.org/plugins/hb-audio-gallery-lite/ Tested on: MSWin32 Version: 1.0.0...
WordPress MiwoFTP Plugin Arbitrary File Download
An arbitrary file download vulnerability exists in Wordpress MiwoFTP Plugin. The vulnerability is due to a parameter arriving from user input, which is not properly sanitized. By using a specially crafted HTTP request, a remote attacker might gain access to arbitrary files...
WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure
WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure Exploit Title: Wordpress image-export LFD Date: 03/21/2016 Exploit Author: AMAR^SHG Vendor Homepage: http://www.1efthander.com Software Link: http://www.1efthander.com/category/wordpress-plugins/image-export Version: Everything is...
WordPress Plugin eBook Download 1.1 - Directory Traversal
Exploit Title: Wordpress eBook Download 1.1 | Directory Traversal Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Software Link: https://downloads.wordpress.org/plugin/ebook-download.zip Version: 1.1 Tested on: Xampp on Windows7 Version Disclosure...
Oracle Application Testing Suite DownloadServlet reportName Directory Traversal (CVE-2016-0476)
A directory traversal vulnerability has been reported in Oracle Load Testing component of Oracle Application Testing Suite. The vulnerability is caused due to improper handling of path names when downloading files via the Oracle Load Testing component. Unauthenticated remote attackers could explo...
AVCON org_execl_download.action filename任意文件下载漏洞
No description provided by source...
CVE-2016-1991
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors...
Design/Logic Flaw
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors...
CVE-2016-1991
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors...