1674 matches found
Atmail Webmail 7.2 - Multiple Vulnerabilities
Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber Request:...
Atmail Webmail 7.2 - Multiple Vulnerabilities
Atmail Webmail 7.2 - Multiple Vulnerabilities Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET -...
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
yvora - Full Path Disclosure
The yvora WordPress theme was affected by a Full Path Disclosure security vulnerability...
Shotzz - Full Path Disclosure
The shotzz WordPress theme was affected by a Full Path Disclosure security vulnerability...
moneymasters - Full Path Disclosure
The moneymasters WordPress theme was affected by a Full Path Disclosure security vulnerability...
appius - Full Path Disclosure
The appius WordPress theme was affected by a Full Path Disclosure security vulnerability...
onepagewebsite - Full Path Disclosure
The onepagewebsite WordPress theme was affected by a Full Path Disclosure security vulnerability...
Activity Log - Full Path Disclosure
The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Meta Slider 2.1.6 - Multiple Full Path Disclosure
The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...
WP Photo Album Plus - Full Path Disclosure
The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...
super-refer-a-friend - Full Path Disclosure
The Super Refer A Friend WordPress plugin was affected by a Full Path Disclosure security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Photocrati Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Shotzz Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...