WordPress Google Document Embedder Plugin - Arbitrary File Disclosure

Google Document Embedder plugin is prone to an arbitrary file disclosure vulnerability. It allows for database credential disclosure via the /libs/pdf.php script. Solution Update the plugin...

WordPress Google Doc Embedder Plugin Arbitrary File Disclosure Vulnerability

The Google Doc Embedder Plugin for WordPress is prone to an arbitrary file-disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress Plugin Google Document Embedder - Arbitrary File Disclosure (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rbmysql' class Metasploit3 'WordPress Plugin...

MotoCMS - 'admin/data/users.xml' Access Restriction / Information Disclosure

source: https://www.securityfocus.com/bid/57055/info MotoCMS is prone to a file-disclosure and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload a file and view local files in the context of the web server process, which may aid in further attacks. MotoCMS 1.3...

Simple Machines Forum 2.0.3 File Disclosure

Summary: -------------- A security flaw allows an attacker to know the full source file of the web system. Details: ----------- Sources/ManageErrors.php Line 340: // Make sure the file we are looking for is one they are allowed to look at if !isreadable$file || strpos$file, '../' !== false &&...

WordPress Plugin Google Document Embedder Arbitrary File Disclosure

This module exploits an arbitrary file disclosure flaw in the WordPress blogging software plugin known as Google Document Embedder. The vulnerability allows for database credential disclosure via the /libs/pdf.php script. The Google Document Embedder plug-in versions 2.4.6 and below are vulnerabl...

CubeCart 4.4.6 and lower | Local File Inclusion Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

H.264 DVR Camera Remote File Discolure Vulnerability

Exploit for hardware platform in category web applications This is private exploit. You can buy it at https://0day.today...

MLE-Moodle 0.8.8.4 <= Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: MLE-Moodle 0.8.8.4 = Local File Inclusion Vulnerability Date: 19/12/2012 Author: GoLdM Libyan Page FaceBook http://www.facebook.com/pages/وَذَكِّـــرْ/337878286310383 Version: 2.3.0 Category:: Local File Disclosure Vulnerability...

Common php page vulnerability analysis and related problem solving-vulnerability warning-the black bar safety net

Now from a network security point of view, everyone's attention and contact up the WEB page vulnerability should be the ASP, in this regard, the small bamboo is the expert, I don't have a voice. However, in PHP terms, also there are serious security issues, but this aspect of the article, but not...

[DC-2012-11-002] DefenseCode ThunderScan ASP.Net C# Advisory: BugTracker.Net Multiple Security Vulnerabilities

DefenseCode ThunderScan ASP.Net C Advisory: BugTracker.Net Multiple Security Vulnerabilities Advisory ID: DC-2012-11-002 Advisory Title: BugTracker.Net Multiple Security Vulnerabilities Advisory URL: http://www.defensecode.com/article/bugtracker.netmultiplesecurityvulnerabilities-31 Software:...

Site Builder RumahWeb Arbitrary Config File Disclosure Vulnerability

========================================================================================== Site Builder RumahWeb Arbitrary Config File Disclosure Vulnerability ==========================================================================================...

Cisco DPC2420 Cross Site Scripting / File Disclosure

Cisco DPC2420 router is prone to a file disclosure and to a XSS vulnerability because it fails to sufficiently sanitize user supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Havalite 1.1.7 Cross Site Scripting / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Cisco DPC2420 Cross Site Scripting / File Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Title: DPC2420 Multiple vulnerabilities - Author: Facundo M. de la Cruz tty0 - E-mail: [email protected] 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router. Firmware: D2425-P10-13-v202r12811-110511as-TRO.bin Software:...

Cisco DPC2420 - Multiples Vulnerabilities

Cisco DPC2420 - Multiples Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Title: DPC2420 Multiple vulnerabilities - Author: Facundo M. de la Cruz tty0 - E-mail: [email protected] =20 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router.=20 Firmware:...

Cisco DPC2420 - Multiples Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Title: DPC2420 Multiple vulnerabilities - Author: Facundo M. de la Cruz tty0 - E-mail: [email protected] =20 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router.=20 Firmware: D2425-P10-13-v202r12811-110511as-TRO.bin Software:...

Symantec Messaging Gateway 9.5.3 File Disclosure

File disclosure vulnerability in Symantec Messaging Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Omni-Secure 5, 6, 7 Multiple File Disclosure Vulnerabilities - Active Check

Omni-Secure is prone to multiple file disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

F5 FirePass SSL VPN 7.0.0 HF-70-6 Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7 impact: Critical homepage:...