WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload

Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Date: 08.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: https://wordpress.org/plugins/reflex-gallery/ Software Link:...

WordPress Reflex Gallery Plugin 3.1.3 - Arbitrary File Upload

WordPress Reflex Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

Wordpress Plugin Reflex Gallery - Arbitrary File Upload Vulnerability

Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Vendor Homepage: https://wordpress.org/plugins/reflex-gallery/ Version: 3.1.3 Last Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork:...

ReFlex Gallery 1.3 - Shell Upload

The ReFlex Gallery » WordPress Photo Gallery WordPress plugin was affected by a Shell Upload security vulnerability...

ReFlex Gallery 1.4.2 - Unspecified XSS

The ReFlex Gallery » WordPress Photo Gallery WordPress plugin was affected by an Unspecified XSS security vulnerability...

WordPress ReFlex Gallery 1.3 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Reflex Gallery Upload Vulnerability

This module exploits an arbitrary PHP code upload in the WordPress Reflex Gallery version 3.1.3. The vulnerability allows for arbitrary file upload and remote code execution. Module Options msf use exploit/unix/webapp/wp/reflexgalleryfileupload msf undefinedreflexgalleryfileupload show actions...

SecurityReporter < 4.6.3p1 Multiple Vulnerabilities

The 'file.cgi' script included with the version of SecurityReporter installed on the remote host fails to sanitize input to the 'name' parameter before returning the contents of the specified file and supports bypassing authentication using specially crafted arguments. An unauthenticated, remote...