WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability ...

WordPress Plugin WP E-Commerce - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/65130/info The WP e-Commerce plugin for WordPress is prone to multiple security vulnerabilities, including: 1. Multiple remote code-execution vulnerabilities. 2. A local file-include vulnerability 3. An arbitrary file-upload vulnerability An attacker can...

Wordpress Plugin (wp-e-commerce v3.8.9.5) Multiple Vulnerabilities

Wordpress Plugin wp-e-commerce v3.8.9.5 - File Upload - RCE - LFI - XSS/CSRF ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a...

bloofox CMS 0.5.0 - Multiple Vulnerabilities

bloofoxCMS version 0.5.0 suffers from cross site request forgery, local file inclusion, and remote SQL injection vulnerabilities. bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact :...

BloofoxCMS - adminindex.php Cross-Site Request Forgery (Add Admin)

BloofoxCMS - adminindex.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local...

BloofoxCMS 0.5.0 - Multiple Vulnerabilities

BloofoxCMS 0.5.0 - Multiple Vulnerabilities bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

BloofoxCMS - bloofoxadminindex.php?Username SQL Injection

BloofoxCMS - bloofoxadminindex.php?Username SQL Injection source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include...

bloofoxCMS 0.5.0 CSRF / LFI / SQL Injection

bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.bloofox.com/download.21.html 1...

BloofoxCMS - '/bloofox/admin/index.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

BloofoxCMS 0.5.0 - Multiple Vulnerabilities

bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.bloofox.com/download.21.html 1...

BloofoxCMS - '/admin/index.php' Cross-Site Request Forgery (Add Admin)

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

PT-2014-2092

Name of the Vulnerable Software and Affected Versions Amberdms Billing System ABS versions prior to 1.4.1 Description The issue might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services usage.php cron job, specifically when a...

CVE-2010-5292: Exposure of Sensitive Information to an Unauthorized Actor

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Seagate BlackArmor NAS Multiple Vulnerabilities

Seagate BlackArmor NAS is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities

Document Title: =============== Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1168 Release Date: ============= 2013-12-11 Vulnerability Laboratory ID VL-ID: ==================================...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Zimbra e-mail system file include vulnerability-vulnerability warning-the black bar safety net

! Zimbra mail system file include vulnerability Zimbra 0day exploit / Privilegie escalation via LFI - low-key development - Minghacker Foreign a vulnerabilities sharing platform http://www.exploit-db.com/exploits/30085/）broke Zimbra mail system there is a file that contains a vulnerability, the...

Song Exporter v2.1.1 RS iOS文件包含漏洞

Song Exporter可以将你iOS设备的歌曲通过WiFi传输到同一局域网内任何电脑上的实用工具，让你无需iTunes也能方便的将音乐备份到电脑上。 本地文件包含Web漏洞允许远程攻击者未经授权包含本地文件的请求或系统特定的路径命令，控制网页应用程序或设备。 0 Song Exporter 2.1.1 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://itunes.apple.com/us/app/song-exporter-pro/id421646421 Proof of Concept PoC:...

AFCommerce - adblock.php Remote File Inclusion

AFCommerce - adblock.php Remote File Inclusion source: https://www.securityfocus.com/bid/64541/info AFCommerce is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentiall...

AFCommerce - 'adminpassword.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/64541/info AFCommerce is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary...