4342 matches found
SysAid Path Disclosure Vulnerability
SysAid Help Desktop Software is prone to a path disclosure vulnerability Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk 14.4 - Multiple Vulnerabilities Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated:...
Shopify: Header Misconfiguration - PHP API
Hey, Your index api page auth can easily be bypassed because it doesn't use proper auth practices in its PHP core. Here is the master code from Shopify: https://github.com/Shopify/shopifyphpapi/blob/master/index.php it says: if !isset$SESSION'shop' || !isset$SESSION'token' header"Location:...
WordPress NextGEN Gallery Plugin <= 1.9.11 - Full Path Disclosure
Because of this vulnerability, attackers can disclose certain system information. Solution Update the plugin...
WordPress Sintic Gallery Plugin - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...
WordPress RokNewsPager Plugin <= 1.17 - Multiple Vulnerabilities
This plugin is prone to cross site scripting, denial of service, full path disclosure and arbitrary file upload vulnerabilities. Solution Update plugin...
WordPress Jigoshop Plugin <= 1.8 - Full Path Disclosure
This plugin is prone to a multiple script direct request path disclosure. Solution Upgrade the plugin...
WordPress RokBox Plugin <= 2.13 - Multiple Vulnerabilities
This plugin is prone to multiple vulnerabilities: 1. Path Disclosure via thumb.php "src" parameter. 2. Cross site scripting in thumb.php "src" parameter. 3. Direct request path disclosure in rokbox.php. 4. Arbitrary file upload via thumb.php "src" parameter. 5. Direct request error log informatio...
WordPress NextGEN Gallery Plugin <= 1.7.3 - Full Path Disclosure
This plugin is prone to xml/ajax.php full path disclosure vulnerability. Solution Update the plugin...
WordPress LBG Zoominoutslider Plugin - Full Path Disclosure
This plugin is prone to a multiple script direct request path disclosure. Solution Upgrade the plugin...
WordPress RokStories Plugin <= 1.25 - Multiple Vulnerabilities
This plugin is prone to cross site scripting, denial of service, full path disclosure and arbitrary file upload vulnerabilities. Solution Update plugin...
WordPress Random Image Widget Plugin - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...
WordPress Exploit Scanner Plugin <= 1.3.3 - Multiple Vulnerabilities
This plugin is prone to a full path disclosure and security bypass vulnerabilities. Attackers can inject PHP backdoor into web site or execute OS commands. Solution Update the plugin...
WordPress Mingle Forum Plugin <= 1.0.28 - Multiple Vulnerabilities
This plugin is prone to cross site scripting and full path disclosure vulnerabilities. Solution Update plugin...
WordPress SpamFree Plugin <= 1.9.2 - Full Path Disclosure
This plugin is prone to a multiple script direct request path disclosure. Solution Upgrade the plugin...
WordPress Random Image Widget Plugin - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...
WordPress Jigoshop Plugin <= 1.8 - Full Path Disclosure
This plugin is prone to a multiple script direct request path disclosure. Solution Upgrade the plugin...
WordPress RokMicroNews Plugin <= 1.5 - Multiple Vulnerabilities
This plugin is prone to cross site scripting, denial of service, full path disclosure and arbitrary file upload vulnerabilities. Solution Update plugin...