Wordpress 3.4.2 JetPack Full Path Disclosure

Exploit for php platform in category web applications Exploit Title: Full Path Disclosure Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Wordpress 3.4.2 - JetPack Category:: WebApps Google dork: inurl:...

OpenCart v. 1.5.1.3 Full Path Disclosure Multiple

There are multiple pages in opencart 1.5.1.3 that disclose the full path. url/catalog/controller/account/address.php url/catalog/controller/account/account.php url/catalog/controller/account/download.php url/catalog/controller/account/edit.php url/catalog/controller/error/notfound.php everything ...

Wordpress Plugins - my-link-order Full Path Disclosure Vulnerability

My Link Order allows you to set the order in which links and link categories will appear in the sidebar. Uses a drag and drop interface for ordering. Adds a widget with additional options for easy installation on widgetized themes. Souhail Hammou - Independant Security Researcher & Penetration...

vBulletin 4.2.0 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...

Newscoop 4.0.2 Blind SQLi & Path Disclosure Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress 3.4.2 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications The Full Path Disclosure is in Wordpress = 3.4.2, with this information you can get the path to the site you're in and in most of the cases cpanel's username. To see it go to: http://path/wp-includes/rss-functions.php Examples:...

Newscoop 4.0.2 Path Disclosure / SQL Injection

================================================================================ Vulnerable Software: Newscoop 4.0.2 Official site: sourcefabric.org Vulnerabilities: Blind SQLi & Path Disclosure Condition to exploit this vulnerability: GPC must be set OFF. Discovered by: AkaStep && KASIBOGLAN...

MyBB 1.6.8 multiple full-path disclosure vulnerability

Exploit for php platform in category web applications Title: MyBB 1.6.8 FPD Author: KrypTiK Vendor or Software Link: www.mybb.com/downloads Version: MyBB 1.6.8 Latest Category: webapps Google Keywords: intext:Powered By MyBB, © 2002-2012 MyBB Group Tested on: Linux 1...

MODX CMS 1.x - 2.x Brute Force and Path Disclosure Vulnerabilities - Active Check

MODX CMS is prone to brute force and path disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera < 12.11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.11 and is, therefore, reportedly affected by the following vulnerabilities : - A heap-based buffer overflow error exists related to handling HTTP responses that can lead to application crashes or arbitrary code execution. 1036 -...

CVE-2012-5915

Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to 1 view.php, 2 plugins/contact/lang/contact.en.lang.php, 3 system/lang/en/main.lang.php, 4 system/lang/en/message.lang.php, or 5 system/core/view/view.inc.php, which reveals the...

WordPress Plugin bbPress - Multiple Vulnerabilities

WordPress Plugin bbPress - Multiple Vulnerabilities Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all...

WordPress bbPress Plugin - Multiple Vulnerabilities

This bbPress plugin is prone to multiple vulnerabilities such as SQL injection, full path disclosure and directory listing vulnerabilities. Solution Update the plugin...

WordPress Plugin bbPress - Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers and white hats...

Wordpress Plugin bbpress Multiple Vulnerabilities

Exploit for php platform in category web applications Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : email protected Greetings to all morocca...

WordPress Foxypress Plugin 0.4.2.5 - Multiple Vulnerabilities

Foxypress plugin is prone to multiple vulnerabilities. 1. Arbitrary file upload vulnerability via "documenthandler.php". It allows an attacker to upload files with arbitrary extension to remote system. 2. SQL Injection vulnerability via "documenthandler.php" that allows an attacker to insert any...

VicBlog Path Disclosure / SQL Injection

Author : Geek Title : Vicblog Multiple Vulnerabilities Date : 10/25/2012 Dork : allintext: "Powered by VicBlog" Tested On : Winxp Multiple Sql Injection x File : passwordforgotten x Code : $email = $POST'email' ; $sql = mysqlquery"SELECT FROM vbaccounts where email = '$email'" x P0c :...

phpFaber CMS Multiple Vulnerabilities

phpFaber CMS Version: 2.4.0 CSRF Change Administrator Settings, Database Disclosure, Full Path Disclosure 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

Contao 2.11.6 Path Disclosure

title: Contao 2.11.6 Multiple vulnerabilities vulnerable version: 2.11.6 impact: medium homepage: www.contao.org found: 23.10.2012 by: aulmn Vendor description: Contao is an open source content management system CMS for people who want a professional internet presence that is easy to maintain...

WordPress Social Discussions Plugin 6.1.1 - Multiple Vulnerabilities

WordPress Social Discussions plugin is prone to remote file inclusion and full path disclosure in multiple scripts vulnerabilities. Solution Update the plugin...