WordPress Feather12 Theme - Multiple Vulnerabilities

The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...

WordPress Shotzz Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress Yvora Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...

WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure

This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...

WordPress Starbox Voting Plugin - Full Path Disclosure

Because of this vulnerability, remote users can determine the full path to the web root directory and other potentially sensitive information. Solution Update the plugin...

WordPress Photocrati Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

WordPress Music Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

Sahifa 2.4.0 - Multiple Full Path Disclosure

The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...

WordPress DZS Video Gallery XSS / Path Disclosure / Command Execution

Hello list! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

Localize: PHP PDOException and Full Path Disclosure

hi phrasekey , agian! in phraseChange action if set to array pdo quote show error! line 755 index.php Warning: PDO::quote expects parameter 1 to be string, array given in /srv/data/web/vhosts/www.localize.im/htdocs/classes/Database.php on line 30 Fatal error: Uncaught exception 'PDOException' wit...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

No description provided by source. Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/ Software:...

Punbb 1.3.4 - Multiple Full Path Disclosure Vulnerability

No description provided by source. Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file...

UTStats XSS, SQL Injection & Full path disclosure

No description provided by source. Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE : none Code : There are most...

minibb 2.2 (css/sql/fpd) Multiple Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...

social web cms <= beta 2 - Multiple Vulnerabilities

No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...

SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities

No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...

PHP <=5.3 - preg_match() full path disclosure

No description provided by source. MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...

unclassified newsboard 1.6.4 - Multiple Vulnerabilities

No description provided by source. Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork This board is powered by the Unclassified NewsBoard software, 1.6.4 Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs...

Concrete5 <= 5.4.2.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link: http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/...