WordPress Organizer 1.2.1 Cross Site Scripting / Directory Traversal

Hello list! After previous vulnerabilities in plugin Organizer, I'll present five more security vulnerabilities in plugin Organizer for WordPress. This is the fourth in series of advisories concerning vulnerabilities in this plugin. These are Directory Traversal, Cross-Site Scripting and Full pat...

Drupal 7.14 <= Full Path Disclosure Vulnerability

Drupal 7.14 = Full Path Disclosure Vulnerability Discovered by: Jean Pascal Pereira [email protected] About Drupal: "Drupal is an open source content management platform powering millions of websites and applications. It's built, used, and supported by an active and diverse community of people...

IA, CSRF and FPD vulnerabilities in Organizer for WordPress

Hello 3APA3A! I want to warn you about multiple new security vulnerabilities in plugin Organizer for WordPress. This is the third in series of advisories concerning vulnerabilities in this plugin. These are Insufficient Authorization, Cross-Site Request Forgery and Full path disclosure...

WordPress Organizer 1.2.1 Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about multiple security vulnerabilities in plugin Organizer for WordPress. This is the first in series of advisories concerning vulnerabilities in this plugin. These are Cross-Site Scripting reflected and persistent and Full path disclosure vulnerabilities...

XSS and FPD vulnerabilities in Organizer for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin Organizer for WordPress. This is the first in series of advisories concerning vulnerabilities in this plugin. These are Cross-Site Scripting reflected and persistent and Full path disclosure vulnerabilities...

WebGlimpse 2.x - wgarcmin.cgi Full Path Disclosure

WebGlimpse 2.x - wgarcmin.cgi Full Path Disclosure source: https://www.securityfocus.com/bid/52646/info WebGlimpse is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...

ModX 2.2.0 - Multiple Vulnerabilities

Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure Google Dork: if relevant we will automatically add these to the GHDB Date: 13/03/2012 Author: n0tch aka andmuchmore Software Link: http://modx.com/download/ Version: 2.2.0 Tested on: Windows XP/ Windows 7 / Ubuntu +-- LFI --+...

ModX 2.2.0 - Multiple Vulnerabilities

ModX 2.2.0 - Multiple Vulnerabilities Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure Google Dork: if relevant we will automatically add these to the GHDB Date: 13/03/2012 Author: n0tch aka andmuchmore Software Link: http://modx.com/download/ Version: 2.2.0 Tested on: Windows XP/ Windows 7...

Drupal 7.x Search Module Path Disclosure

Drupal 7.x Search Module - Full Path Disclosure ============== Summary Full path disclosure due to insufficient input validation in the search module. ============== Description Performing a search with the "keys" parameter set as an array, an error message shows the full path of the Drupal...

PBLang local file include vulnerability

Exploit for php platform in category web applications ||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / /...

Multiple new vulnerabilities in Register Plus for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus for WordPress. These are Cross-Site Scripting, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Register Plus...

Register Plus 3.5.1 Cross Site Scripting / Code Execution

Hello list! I want to warn you about multiple new vulnerabilities in plugin Register Plus for WordPress. These are Cross-Site Scripting, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Register Plus 3.5...

vBulletin v4.1.10 - Path Information Disclosure

Document Title: =============== vBulletin v4.1.10 - Path Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=387 Release Date: ============= 2012-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 387 Product...

vBulletin v4.1.10 - Path Information Disclosure

Document Title: =============== vBulletin v4.1.10 - Path Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=387 Release Date: ============= 2012-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 387 Product...

Multiple new vulnerabilities in Register Plus Redux for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...

Register Plus Redux 3.7.3.1 XSS / SQL Injection / Code Execution

Hello list! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected product...

Уязвимости в Zeema CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force, Cross-Site Scripting и Full path disclosure уязвимостях в системе Zeema CMS. Это украинская коммерческая CMS. Brute Force WASC-11: http://site/cms/ XSS WASC-08:...

TinyMCE / flvPlayer Cross Site Scripting / Disclosure

No description provided by source. I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in...

Multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications

Hello 3APA3A! I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in flvPlayer, which is...

TinyMCE / flvPlayer Cross Site Scripting / Disclosure

Hello list! I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in flvPlayer, which is includ...