Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. curl --data "action=fegetsvhtml&video=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

WordPress MP3 jPlayer Plugin <= 2.3 - Local File Disclosure

Because of this vulnerability, attackers can download or disclosure file's from the root-path. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Local File Disclosure

The MP3-jPlayer WordPress plugin was affected by a Local File Disclosure security vulnerability...

Codiad 2.5.3 - LFI Vulnerability

Exploit for php platform in category web applications +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

Codiad 2.5.3 Local File Inclusion

+Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP ////////////////////////////////////////////////////////////////// // Run Download...

FortiAuthenticator v300 build 0007 Multiple Vulnerabilities

Fortinet FortiAuthenticator suffers from subshell bypass, cross site scripting, password disclosure, and file disclosure vulnerabilities. Fortinet FortiAuthenticator Multiple Vulnerabilities Affected Versions: Verified on FortiAuthenticator v300 build 0007 +-------------+ | Description |...

WordPress Revolution Slider Local File Disclosure Vulnerability

WordPress Revolution Slider plugin suffers from a local file disclosure vulnerability. Note that this finding houses site-specific data. + Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage:...

WordPress Revolution Slider Local File Disclosure

Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage: https://wordpress.org/plugins/patch-for-revolution-slider/ + Tested on: windows 7 / firefox , kali linux / firefox + Vulnerable Files: /plugins/revolution-slider/ + Dork : "Index of"...

WordPress RevSlider Local File Disclosure

Exploit Title: Wordpress RevSlider Plugin LFD Google Dork: inurl:/admin-ajax.php?action=revslidershowimage Date: 12/29/14 Exploit Author: FarbodEZRaeL Vendor Homepage: iranhack.org Software Link: wordpress.org Tested on: windows Exploit: Exploits Wordpress...

Server: Potential local file disclosure

ownCloud offers the OCUtil::getUrlContent to developers. Using this function applications can download content from remote websites. Due to a newly introduced bug in this functionality it was following redirects to other protocols such as file://. Thus, an attacker may be able to gain access to...

rubygem-actionpack: directory traversal issue

A directory traversal flaw was found in the way Ruby on Rails handled wildcard segments in routes with implicit rendering. A remote attacker could use this flaw to retrieve arbitrary local files accessible to a Ruby on Rails application using the aforementioned routes via a specially crafted...

WordPress Slider Revolution - Local File Disclosure

Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...

UnGallery <= 1.5.8 - Local File Disclosure

The UnGallery WordPress plugin was affected by a Local File Disclosure security vulnerability...

WordPress SCv1 Theme - Local File Disclosure

Estrutura Basica themes are prone to a local file disclosure vulnerability via the "file" parameter. Solution Update the theme...

XXE in multiple third party components - ownCloud

Multiple third party components of ownCloud are vulnerable to XXE attacks, which may lead to: Local File Disclosure Server Side Request Forgery DoS Code Execution depending on the PHP wrappers … The following libraries are affected: ZendFramework: CVE-2014-2052 GetID3: CVE-2014-2053 PHPExcel:...

Server: XXE in multiple third party components

Multiple third party components of ownCloud are vulnerable to XXE attacks, which may lead to: Local File Disclosure Server Side Request Forgery DoS Code Execution depending on the PHP wrappers … The following libraries are affected: ZendFramework: CVE-2014-2052 GetID3: CVE-2014-2053 PHPExcel:...

WHMCS 3.x.x (clientarea.php) Local File Disclosure

No description provided by source. Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com...