WordPress Powerplay Gallery Plugin <= 3.3 - Unrestricted File Upload

This vulnerability allows an attacker to execute arbitrary code by uploading a file with an executable extension. After that an attacker access it via a direct request to the file in uploadfolder/big/. Solution Update the plugin...

WordPress Powerplay Gallery Plugin <= 3.3 - Multiple SQL Injection

This vulnerability is in upload.php. It allows an attacker to execute arbitrary SQL commands via the "albumid" or "name" parameter. Solution Update the plugin...

Wordpress Plugins - Powerplay Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

cognos.powerplay.txt

Date: Mon, 28 Jun 1999 07:29:37 -0400 From: Darin White To: [email protected] Subject: Cognos PowerPlay Web Edition security WEB SECURITY ADVISORY ------------- Release Date: 1999-06-25 Application: Cognos PowerPlay Web Edition Severity: Unauthenticated web users can sniff cube data Author:...

Cognos Powerplay WE Multiple Information Disclosure Vulnerabilities

The CGI script ppdscgi.exe, part of the PowerPlay Web Edition package, is installed. Due to design problems as well as some potential web server misconfiguration PowerPlay Web Edition may serve up data cubes in a non-secure manner. Execution of the PowerPlay CGI pulls cube data into files in an...