Wordpress Theme Avada Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Avada Arbitrary File Download Vulnerability Date: 19/01/2014 Exploit Author: Vylegzhanin Contact : email protected Tested on: Linux / Window Google Dork: inurl:wp-content/themes/avada PoC...

WordPress Bretheon Theme Arbitrary File Download

Exploit Title: Wordpress Theme Bretheon Arbitrary File Download Vulnerability Date: 17/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected]| https://twitter.com/MindCrackerKhan Tested on: Linux / Window Google Dork: inurl:wp-content/themes/bretheon/ Po...

Wordpress Theme Pindol Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Pindol Arbitrary File Download Vulnerability Date: 18/01/2015 Exploit Author: t3rr0rist from GHC Georgian Hacking Community Contact : email protected Tested on: Linux Google Dork: inurl:"wp-content/themes/pindol/...

Wordpress Theme U-Design Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme U-Design Arbitrary File Download Vulnerability Date: 18/01/2015 Exploit Author: t3rr0rist - GHC Georgian Hacking Community team Contact : email protected Tested on: Linux Google Dork:...

Wordpress Theme Bretheon Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Bretheon Arbitrary File Download Vulnerability Date: 17/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : email protected - email protected| https://twitter.com/MindCrackerKhan Tested on: Linux / Wind...

GI-Media Library <= 2.2.2 - Arbitrary File Download

The gi-media-library WordPress plugin was affected by an Arbitrary File Download security vulnerability. /wp-content/plugins/gi-media-library/download.php?fileid=Li4vLi4vLi4vd3AtY29uZmlnLnBocA== Where "Li4vLi4vLi4vd3AtY29uZmlnLnBocA==" is "../../../wp-config.php" Base64 encoded...

WordPress GI-Media Library Plugin <= 2.2.2 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

用友ICC客服系统任意文件下载漏洞影响联通人寿等

简要描述： 任意文件下载 详细说明： 用友icc客户系统存在任意文件下载漏洞，漏洞文件common/getfile.jsp源码如下： % String fullPath = ""; String f=""; f = request.getParameter"p"; ifCommonUtil.validateParamf f = ""; f = CommonUtil.filtParamf; iff == null || f.equals"" out.print"请传入文件名。 "; return; f = f.substringf.lastIndexOf"/"+1; String...

CVE-2014-9271

Cross-site scripting XSS vulnerability in filedownload.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename...

CVE-2014-9271

Cross-site scripting XSS vulnerability in filedownload.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename...

Wordpress Infocus2 Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Title : Wordpress Infocus2 Theme Arbitrary File Download Vulnerability Author : KillerX Date : 5/1/2015 KillerX Facebook : http://www.facebook.com/xXalreshyXx Ask : http://ask.fm/ALRESHY Twitter : https://twitter.com/killerx00x Email :...

大汉网络JCMS任意文件下载

简要描述： 大汉网络文件遍历 详细说明： 漏洞Url： /jcms/m5e/module/voting/down.jsp?filename=a.txt&pathfile=/etc/passwd 下载文件： root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin...

Wordpress Ajax Store Locator Arbitrary File Download

An arbitrary file download vulnerability exists in Wordpress Ajax Store Locator. The vulnerability is due to a parameter arriving from user input, which is not properly sanitized. A remote attacker might gain access to arbitrary files using a specially crafted request...

ManageEngine NetFlow Analyzer And IT360 Multiple servlets Arbitrary File Download (CVE-2014-5445)

An arbitrary file download vulnerability exists in ManageEngine Netflow Analyzer and IT360. The vulnerability is due to lack of authentication and insufficient input validation of the schFilePath parameter sent to servlets in HTTP requests. A remote unauthenticated attacker can download arbitrary...

JEECMS arbitrary File Download lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Should be JEECMS old version inurl:download. jspx? path= Arbitrary File Download download. jspx? fpath=WEB-INF/web. xml&filename=WEB-INF/web.xml Case 1 www.xxczj.gov.cn/download.jspx?fpath=WEB-INF/web.xml&filename=WEB-INF/web.xml ! tick. png Case 2...

A user is a particularly large amount of educational classes CMS arbitrary File Download-vulnerability warning-the black bar safety net

Vulnerabilities page: http://www.hbycscjzx.com//OperationManage/DownFile.aspx First register a regular account In personal writing news, when inserted into the attachment capture. You can see the following content code area POST /OperationManage/DownFile. aspx HTTP/1.1 Host: www.hbycscjzx.com...

WordPress Themes download.php File Disclosure

!/usr/bin/php -q ?php =============================================================================== NAME: Wordpress A.F.D Verification/ INURL - BRASIL TIPE: Arbitrary File Download Tested on: Linux EXECUTE: php exploit.php www.target.gov.us OUTPUT: WORDPRESAFD.txt AUTOR: Cleiton Pinheiro / NICK...

Lezhixing cms /datacenter/getfile.do 任意文件下载漏洞

No description provided by source...

HackerOne: Reflected File Download

Info: Reflected File Download is a new web attack vector. It allows an attacker to craft a malicious file and present it to a victim, but there is no file present at the server. It was recently published at the BlackHat Eupore 2014 by Oren Hafif. Link to his presentation is given at the end...

WordPress A.F.D. Theme Echelon Arbitrary File Download

Name: Wordpress A.F.D Theme Echelon / INURL - BRASIL Description: This exploit allows attacker to download any writable file from the server Usage info: Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly File download /etc/pass...