WordPress Ripe HD FLV Player SQL Injection / Path Disclosure

------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-16 E-mail = [email protected]...

Wordpress eggo theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------------------ Exploit Title: Wordpress eggo theme Full Path Disclosure vulnerability Date: 14/01/2012 Author: terrorist Tested on: Fedora17 &&...

Wordpress massimo theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------------------ Exploit Title: Wordpress massimo theme Full Path Disclosure vulnerability Date: 14/01/2012 Author: terrorist Tested on: Fedora17...

Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor:...

WordPress Plugin Ripe HD FLV Player - SQL Injection

WordPress Plugin Ripe HD FLV Player - SQL Injection ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.ph...

phpLiteAdmin 1.8.x / 1.9.x SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

phpLiteAdmin v1.8.x->1.9.x (SQLi/FD) <= Multiple Vulnerabilities

phpLiteAdmin is suffer from multiple vulnerabilities / bugs in v1.8.x to- 1.9.x , the attacker can use some bug in the Script to inject some remote SQL command/code , and Disclosure the Full Path. Bugs : Authentication Bypass SQL Injection/Exec Full Path Disclosure...

Multiple vulnerabilities in Floating Tweets for WordPress

Hello 3APA3A! I want to warn you about multiple vulnerabilities in plugin Floating Tweets for WordPress. These are Full path disclosure, Directory Traversal and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Floating...

Multiple vulnerabilities in TinyBrowser

Hello 3APA3A! I want to warn you about multiple vulnerabilities in TinyBrowser for TinyMCE. These are new vulnerabilities in addition to my 2009 and 2011 advisories about Arbitrary File Upload and Code Execution vulnerabilities in TinyBrowser. It concerns as TinyBrowser, as all web applications...

Wordpress wp-codebox Plugin Full Path Disclosure vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------------------ Exploit Title: Wordpress wp-codebox plugin Full Path Disclosure vulnerability Date: 14/01/2012 Author: terrorist Tested on:...

WordPress Dailyedition-mouss Multiple Vulnerabilities

WordPress Dailyedition-mouss theme suffers from a remote SQL injection vulnerability, XSS, FPD, AoF, DoS, AFU vulnerabilities. Note that this finding houses site-specific data. I want to warn you about multiple vulnerabilities in Daily Edition Mouss theme for WordPress. In 2011 when I wrote about...

Nibbleblog v3.4 (ajax) <= (FD/FU) Multiple Vulnerabilities

Nibbleblog v3.4 is suffer from multiple vulnerabilities / bugs in ajax-Uploader , the attacker can use some bug in the ajax-up plug to Disclosure the Full Path , and the uploader is not protected ! after get admin auth use brute force or any way :p post new image with TamperData Shell-Included an...

ClipBucket V2 full path disclosure Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress slash theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress display theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress striking theme Full Path Disclosure vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Piwigo 2.4.6 Full Path Disclosure Vulnerability

Successful exploitation of this vulnerability may allow an attacker to obtain the real path of the Piwigo installation. Exploit Title: Piwigo 2.4.6 Full Path Disclosure Vulnerability Date: 01/12/2013 Exploit Author: email protected - http://la.usch.io -...

WordPress Floating Tweets 1.0.1 XSS / Directory Traversal

Hello list! I want to warn you about multiple vulnerabilities in plugin Floating Tweets for WordPress. These are Full path disclosure, Directory Traversal and Cross-Site Scripting vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Floating Tweet...

Wordpress wp-polls plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Exploit: http://localhost/wp-content/plugins/wp-polls/polls-templates.php Demo http://www.catenaccio.nl/wp-content/plugins/wp-polls/polls-templates.php http://www.iaei.org/wp-content/plugins/wp-polls/polls-templates.php...

Wordpress vote-it-up plugin Full Path Disclosure vulnerability‎

Exploit for php platform in category web applications Poc http://site.com/wp-content/plugins/vote-it-up/voteitup.php Dork inurl:/plugins/vote-it-up/ Demo : http://www.science-humour.fr/wp-content/plugins/vote-it-up/voteitup.php http://miks.memokraat.ee/wp-content/plugins/vote-it-up/voteitup.php...