WordPress RokBox Multiple Vulnerabilities

These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses TimThumb 1.16 and JW Player 4.4.198, so some of vulnerabilities are related to plugin itself, some to...

WHMCS 5.1.3 Full Path Disclosure vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

OSClass 3.0.2 CSRF/FPD Vulnerabilities

---- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

vBulletin 5 Multiple Full Path Disclosure vulnerabilities

vBulletin 5.x suffers from multiple FPD's. Where there is a that means ALL FILES! /core/vb5/route/channel.php /core/vb5/route/conversation.php /core/vb5/route/.php /includes/api/interface/noncollapsed.php /includes/api/interface/collapsed.php 0day.today 2018-02-19...

WordPress 3.5 multiple path disclosure vulnerabilities

The new word press release has multiple full path disclosure vulnerabilities. author:- cyberboy website:- http://freemium-devils.in/ Greets :- Cyberace Legion , Ghost , S3v3n , Th3 D3stroyer , Captain Zap and team INDISHELL Exploit Title: wordpress 3.5 multiple path disclosure vulnerabilities Dat...

BF and FPD vulnerabilities in MODx

Hello 3APA3A! I want to warn you about security vulnerabilities in MODx. This is the first part of the vulnerabilities in this CMS the first 19 vulnerabilities. These are Brute Force and Full path disclosure vulnerabilities in MODx. It's about 0.x and 1.x Evolution versions of MODx CMS. In 2.x...

IPBoard 3.x.x/3.4 Full Path Disclosure

IPBoard Full Path Disclosure Exploit: admin/upgrade/index.php?app=upgrade&s=&section=index&do=login Dork: intext:Community Forum Software by IP.Board Fix: Turn off displayerrors in php.ini 0day.today 2018-03-13...

vBulletin 4.x/5.x multiple Full Puth Disclosure Vulnerability

A large list of Full Path Disclosure for vBulletin /includes/api/commonwhitelist2.php /includes/api/commonwhitelist5.php /includes/api/commonwhitelist6.php /includes/api/1/albumalbum.php /includes/api/1/albumeditalbum.php /includes/api/1/albumlatest.php /includes/api/1/albumoverview.php...

OpenCart v. 1.5.1.3 Full Path Disclosure Multiple

There are multiple pages in opencart 1.5.1.3 that disclose the full path. url/catalog/controller/account/address.php url/catalog/controller/account/account.php url/catalog/controller/account/download.php url/catalog/controller/account/edit.php url/catalog/controller/error/notfound.php everything ...

Wordpress Plugins - my-link-order Full Path Disclosure Vulnerability

My Link Order allows you to set the order in which links and link categories will appear in the sidebar. Uses a drag and drop interface for ordering. Adds a widget with additional options for easy installation on widgetized themes. Souhail Hammou - Independant Security Researcher & Penetration...

Moodle 1.9.14.2 Full Puth Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure --- Moodle 1.9.x - 1.9.14.2 Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Moodle 1.9.x - 1.9.14.2 Category:: WebApps...

Wordpress 3.4.2 JetPack Full Path Disclosure

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Wordpress 3.4.2 - JetPack Category:: WebApps Google dork: inurl:...

Wordpress 3.4.2 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is in Wordpress = 3.4.2, with this information you can get the path to the site you're in and in most of the cases cpanel's username. To see it go to: http://path/wp-includes/rss-functions.php Examples:...

Newscoop 4.0.2 Blind SQLi & Path Disclosure Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

vBulletin 4.2.0 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...

Newscoop 4.0.2 Path Disclosure / SQL Injection

================================================================================ Vulnerable Software: Newscoop 4.0.2 Official site: sourcefabric.org Vulnerabilities: Blind SQLi & Path Disclosure Condition to exploit this vulnerability: GPC must be set OFF. Discovered by: AkaStep && KASIBOGLAN...

MyBB 1.6.8 multiple full-path disclosure vulnerability

Exploit for php platform in category web applications Title: MyBB 1.6.8 FPD Author: KrypTiK Vendor or Software Link: www.mybb.com/downloads Version: MyBB 1.6.8 Latest Category: webapps Google Keywords: intext:Powered By MyBB, © 2002-2012 MyBB Group Tested on: Linux 1...

Opera < 12.11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.11 and is, therefore, reportedly affected by the following vulnerabilities : - A heap-based buffer overflow error exists related to handling HTTP responses that can lead to application crashes or arbitrary code execution. 1036 -...

MODX CMS 1.x - 2.x Brute Force and Path Disclosure Vulnerabilities - Active Check

MODX CMS is prone to brute force and path disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5915

Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to 1 view.php, 2 plugins/contact/lang/contact.en.lang.php, 3 system/lang/en/main.lang.php, 4 system/lang/en/message.lang.php, or 5 system/core/view/view.inc.php, which reveals the...