CVE-2015-5599

CVE-2015-5599 affects the WordPress plugin Powerplay Gallery (plugin version 3.3 and earlier) with multiple SQL injection vulnerabilities in upload.php. Attackers could remotely execute arbitrary SQL commands via the albumid or name parameters, as described by multiple sources (NVD entry and asso...

CVE-2015-5681

CVE-2015-5681 affects the WordPress Powerplay Gallery plugin, version 3.3. It describes an unrestricted file upload vulnerability in upload.php that allows a remote attacker to upload a file with an executable extension and then access it via a direct request to the file in *_uploadfolder/big/, p...

CVE-2015-5599: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 albumid or 2 name parameter...

PT-2015-6981

Name of the Vulnerable Software and Affected Versions Powerplay Gallery plugin version 3.3 for WordPress Description The issue concerns SQL injection vulnerabilities in the upload.php file of the Powerplay Gallery plugin. Remote attackers can execute arbitrary SQL commands by manipulating the...

CVE-2015-5681: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploadfolder/big/...

PT-2015-7032

Name of the Vulnerable Software and Affected Versions Powerplay Gallery plugin version 3.3 for WordPress Description The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then...

WordPress Powerplay Gallery Plugin <= 3.3 - Unrestricted File Upload

This vulnerability allows an attacker to execute arbitrary code by uploading a file with an executable extension. After that an attacker access it via a direct request to the file in uploadfolder/big/. Solution Update the plugin...

WordPress Powerplay Gallery Plugin <= 3.3 - Multiple SQL Injection

This vulnerability is in upload.php. It allows an attacker to execute arbitrary SQL commands via the "albumid" or "name" parameter. Solution Update the plugin...

Wordpress Plugins - Powerplay Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

cognos.powerplay.txt

Date: Mon, 28 Jun 1999 07:29:37 -0400 From: Darin White To: [email protected] Subject: Cognos PowerPlay Web Edition security WEB SECURITY ADVISORY ------------- Release Date: 1999-06-25 Application: Cognos PowerPlay Web Edition Severity: Unauthenticated web users can sniff cube data Author:...

Cognos Powerplay WE Multiple Information Disclosure Vulnerabilities

The CGI script ppdscgi.exe, part of the PowerPlay Web Edition package, is installed. Due to design problems as well as some potential web server misconfiguration PowerPlay Web Edition may serve up data cubes in a non-secure manner. Execution of the PowerPlay CGI pulls cube data into files in an...