WordPress FoxyPress 0.4.2.5 XSS / CSRF / SQL Injection

waraxe-2012-SA095 - Multiple Vulnerabilities in Wordpress FoxyPress Plugin =============================================================================== Author: Janek Vind "waraxe" Date: 30. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-95.html Description of vulnerab...

WordPress FoxyPress 0.4.2.5 XSS / CSRF / SQL Injection

WordPress FoxyPress plugin version 0.4.2.5 suffers from cross site request forgery, cross site scripting, path disclosure, remote shell upload, open redirect, and remote SQL injection vulnerabilities. Multiple Vulnerabilities in Wordpress FoxyPress Plugin...

WordPress Foxypress 0.4.1.1/0.4.2.1 File Upload

File upload vulnerability in WordPress Foxypress plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Foxypress Plugin 0.4.2.1 - Arbitrary Code Execution

Foxypress plugin is prone to an arbitrary code execution vulnerability. This vulnerability allows for arbitrary file upload and remote code execution via the "uploadify.php" script. Solution Update the plugin...

WordPress Plugin Foxypress - 'Uploadify.php' Arbitrary Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress plugin Foxypress...

WordPress plugin Foxypress uploadify.php Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress plugin Foxypress...

WordPress Foxypress Plugin 'uploadify.php' Arbitrary File Upload Vulnerability

WordPress Foxypress Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Foxypress Shell Upload

Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/foxypress/ Author : Samm...

Wordpress Foxypress Plugin 0.4.1.1 - 0.4.2.1 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dor...

WordPress Foxypress Plugin 0.4.1.1 - 0.4.2.1 - Arbitrary File Upload

Foxypress plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solution...

WordPress Plugin Foxypress 0.4.1.1 0.4.2.1 - Arbitrary File Upload

WordPress Plugin Foxypress 0.4.1.1 0.4.2.1 - Arbitrary File Upload Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-20...

WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload

Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/foxypress/ Author : Samm...