1886 matches found
Atmail Webmail 7.2 - Multiple Vulnerabilities
Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber Request:...
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
vithy - Full Path Disclosure
The vithy WordPress theme was affected by a Full Path Disclosure security vulnerability...
Shotzz - Full Path Disclosure
The shotzz WordPress theme was affected by a Full Path Disclosure security vulnerability...
moneymasters - Full Path Disclosure
The moneymasters WordPress theme was affected by a Full Path Disclosure security vulnerability...
yvora - Full Path Disclosure
The yvora WordPress theme was affected by a Full Path Disclosure security vulnerability...
appius - Full Path Disclosure
The appius WordPress theme was affected by a Full Path Disclosure security vulnerability...
onepagewebsite - Full Path Disclosure
The onepagewebsite WordPress theme was affected by a Full Path Disclosure security vulnerability...
Activity Log - Full Path Disclosure
The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Meta Slider 2.1.6 - Multiple Full Path Disclosure
The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...
WP Photo Album Plus - Full Path Disclosure
The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...
super-refer-a-friend - Full Path Disclosure
The Super Refer A Friend WordPress plugin was affected by a Full Path Disclosure security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
FuckShitUp - Multi Vulnerabilities Scanner written in PHP
Basically, FSU is bunch of tools written in PHP-CLI. Using build-in functions, you are able to grab url's using search engines - and so, dork for interesting files and full path disclosures. Using list of url's, scanner will look for Cross Site Scripting, Remote File Inclusion, SQL Injection and...
WordPress Studio Zen Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Imperial Fairytale Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Feather12 Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...