Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. PoC curl --data "action=fegetsvhtml=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Local File Disclosure

Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant code.. function fegetsvhtml global $wpdb, $videodb, $anndb;...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. curl --data "action=fegetsvhtml&video=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Plugin <= 1.0.5 - Local File Disclosure

This plugin is prone to a local file disclosure vulnerability. Solution Update the plugin...

TP-LINK Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested versions...

SUSE-SU-2015:0787-1 Security update for rubygem-sprockets-2_11

This update for rubygem-sprockets-211 provides the following security fix: Arbitrary file existence disclosure bnc903658, CVE-2014-7819 Security Issues: CVE-2014-7819...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3-Jplayer 2.1 Local File Disclosure

Dx . Made In Algeria . xZ Title : WordPress plugin mp3-jplayer v2.3 Local File Disclosure Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Disclosure 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Local File Disclosure

The MP3-jPlayer WordPress plugin was affected by a Local File Disclosure security vulnerability...

Codiad 2.5.3 - LFI Vulnerability

Exploit for php platform in category web applications +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

MiwoFTP - File & Folder Manager <= 1.0.4 - Arbitrary File Disclosure

A hook is added to ‘init’ in the file ‘miwoftp/miwoftp.php’. This hook is triggered whenever a user visits the front end of the site. The function specified in this hook will proceed to allow the user to download a file within the scope of the home directory of the site. Various values from the G...

WordPress Miwo FTP Plugin <= 1.0.4 - Arbitrary File Disclosure

Because of this vulnerability, users can download a file within the scope of the home directory of the site. Solution Update this plugin...

WordPress IP Blacklist Cloud Plugin <= 3.42 - Arbitrary File Disclosure

This plugin is prone to an arbitrary file disclosure vulnerability. It allows an user with adequate access to the WordPress instance to read files on the system and potentially compromising further credentials such as FTP, MySQL, amongst other sensitive information. Solution Upgrade the plugin...

Codiad 2.5.3 Local File Inclusion

+Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP ////////////////////////////////////////////////////////////////// // Run Download...

IP Blacklist Cloud <= 3.42 - Arbitrary File Disclosure

The IP Blacklist Cloud plugin exposes several AJAX functions to users. One of these is the ‘importCSVIPCloud’ action, which looks to be used to import CSV files into the systems blacklist. This action is susceptible to Directory Traversal, and does not check file extensions, as such it is possibl...

Codiad 2.5.3 - Local File Inclusion

Codiad 2.5.3 - Local File Inclusion +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

RESTeasy: External entities expanded by DocumentProvider

It was found that the RESTEasy DocumentProvider did not set the external-parameter-entities and external-general-entities features appropriately, thus allowing external entity expansion. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessibl...