Web Cookbook File Disclosure / SQL Injection

Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

PHPmyGallery 1.5 - Local File Disclosure Cross-Site Scripting

PHPmyGallery 1.5 - Local File Disclosure Cross-Site Scripting source: https://www.securityfocus.com/bid/58081/info PHPmyGallery is prone to multiple cross-site scripting vulnerabilities and a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may...

Web Cookbook - Multiple Vulnerabilities

Web Cookbook - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

Web Cookbook File Disclosure / SQL Injection Vulnerabilities

Web Cookbook suffers from file disclosure and remote SQL injection vulnerabilities. Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection...

Web Cookbook - Multiple Vulnerabilities

Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...

PHPmyGallery 1.5 - Local File Disclosure / Cross-Site Scripting

source: https://www.securityfocus.com/bid/58081/info PHPmyGallery is prone to multiple cross-site scripting vulnerabilities and a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal

Exploit for php platform in category web applications Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File...

Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal

Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF...

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File Disclosure :...

Forums Plugin for WordPress 'url' Parameter Arbitrary File Disclosure

The Forums Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'url' parameter of the zingforumoutput function in the zingiri-forum/forum.php script. An unauthenticated, remote...

Google Doc Embedder Plugin for WordPress 'File' Parameter Traversal Arbitrary File Disclosure

The Google Doc Embedder Plugin for WordPress installed on the remote host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'file' parameter of the 'libs/pdf.php' script. This vulnerability could allow an unauthenticated, remote attack...

CVE-2012-6502

Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a...

ManageEngine Security Manager Plus 5.5 File Disclosure

File disclosure vulnerability in ManageEngine Security Manager f parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

PRADO 3.2.0 File Disclosure

File disclosure vulnerability in PRADO sr parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Mac Photo Gallery 2.8 File Disclosure

File disclosure vulnerability in WordPress Mac Photo Gallery plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Cloudsafe365 1.46 File Disclosure

File disclosure vulnerability in WordPress Cloudsafe365 plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

MotoCMS - admindatausers.xml Access Restriction Information Disclosure

MotoCMS - admindatausers.xml Access Restriction Information Disclosure source: https://www.securityfocus.com/bid/57055/info MotoCMS is prone to a file-disclosure and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload a file and view local files in the context o...

WordPress Google Doc Embedder Plugin Arbitrary File Disclosure Vulnerability

The Google Doc Embedder Plugin for WordPress is prone to an arbitrary file-disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress Plugin Google Document Embedder Arbitrary File Disclosure

This Metasploit module exploits an arbitrary file disclosure flaw in the WordPress blogging software plugin known as Google Document Embedder. The vulnerability allows for database credential disclosure via the /libs/pdf.php script. The Google Document Embedder plug-in versions 2.4.6 and below ar...

MotoCMS 1.3.3 Password File Disclosure / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...