WordPress Rokbox 2.13 XSS / DoS / File Upload / Path Disclosure

Hello list! I want to warn you about multiple security vulnerabilities in plugin Rokbox for WordPress. These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses...

Wordpress Plugins - wp superb Slideshow Full Path Disclosure

the attacker can use this bug for get Important information 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

Cherokee web server v1.2.101 Full Path Disclosure

This bug is a remote 'Full Path Disclosure in Cherokee web server version 1.2.101 the attacker can use this bug for get Important information and Navigate between files/folders of server and get the content. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

WordPress RokBox Multiple Vulnerabilities

These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses TimThumb 1.16 and JW Player 4.4.198, so some of vulnerabilities are related to plugin itself, some to...

WHMCS 5.1.3 Full Path Disclosure vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

OSClass 3.0.2 CSRF/FPD Vulnerabilities

---- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

vBulletin 5 Multiple Full Path Disclosure vulnerabilities

vBulletin 5.x suffers from multiple FPD's. Where there is a that means ALL FILES! /core/vb5/route/channel.php /core/vb5/route/conversation.php /core/vb5/route/.php /includes/api/interface/noncollapsed.php /includes/api/interface/collapsed.php 0day.today 2018-02-19...

BF and FPD vulnerabilities in MODx

Hello 3APA3A! I want to warn you about security vulnerabilities in MODx. This is the first part of the vulnerabilities in this CMS the first 19 vulnerabilities. These are Brute Force and Full path disclosure vulnerabilities in MODx. It's about 0.x and 1.x Evolution versions of MODx CMS. In 2.x...

IPBoard 3.x.x/3.4 Full Path Disclosure

IPBoard Full Path Disclosure Exploit: admin/upgrade/index.php?app=upgrade&s=&section=index&do=login Dork: intext:Community Forum Software by IP.Board Fix: Turn off displayerrors in php.ini 0day.today 2018-03-13...

vBulletin 4.x/5.x multiple Full Puth Disclosure Vulnerability

A large list of Full Path Disclosure for vBulletin /includes/api/commonwhitelist2.php /includes/api/commonwhitelist5.php /includes/api/commonwhitelist6.php /includes/api/1/albumalbum.php /includes/api/1/albumeditalbum.php /includes/api/1/albumlatest.php /includes/api/1/albumoverview.php...

Wordpress Plugins - my-link-order Full Path Disclosure Vulnerability

My Link Order allows you to set the order in which links and link categories will appear in the sidebar. Uses a drag and drop interface for ordering. Adds a widget with additional options for easy installation on widgetized themes. Souhail Hammou - Independant Security Researcher & Penetration...

OpenCart v. 1.5.1.3 Full Path Disclosure Multiple

There are multiple pages in opencart 1.5.1.3 that disclose the full path. url/catalog/controller/account/address.php url/catalog/controller/account/account.php url/catalog/controller/account/download.php url/catalog/controller/account/edit.php url/catalog/controller/error/notfound.php everything ...

Wordpress 3.4.2 JetPack Full Path Disclosure

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Wordpress 3.4.2 - JetPack Category:: WebApps Google dork: inurl:...

Moodle 1.9.14.2 Full Puth Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure --- Moodle 1.9.x - 1.9.14.2 Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Moodle 1.9.x - 1.9.14.2 Category:: WebApps...

Wordpress 3.4.2 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is in Wordpress = 3.4.2, with this information you can get the path to the site you're in and in most of the cases cpanel's username. To see it go to: http://path/wp-includes/rss-functions.php Examples:...

vBulletin 4.2.0 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...

MyBB 1.6.8 multiple full-path disclosure vulnerability

Exploit for php platform in category web applications Title: MyBB 1.6.8 FPD Author: KrypTiK Vendor or Software Link: www.mybb.com/downloads Version: MyBB 1.6.8 Latest Category: webapps Google Keywords: intext:Powered By MyBB, © 2002-2012 MyBB Group Tested on: Linux 1...

WordPress Plugin bbPress - Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers and white hats...

Wordpress Plugin bbpress Multiple Vulnerabilities

Exploit for php platform in category web applications Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : email protected Greetings to all morocca...

WordPress Foxypress Plugin 0.4.2.5 - Multiple Vulnerabilities

Foxypress plugin is prone to multiple vulnerabilities. 1. Arbitrary file upload vulnerability via "documenthandler.php". It allows an attacker to upload files with arbitrary extension to remote system. 2. SQL Injection vulnerability via "documenthandler.php" that allows an attacker to insert any...