LANDesk Management Suite Remote File Inclusion (CVE-2014-5362)

A remote file inclusion vulnerability has been reported in LANDesk Management Suite. The vulnerability is due to insufficient input validation in the HTTP path. A remote attacker could exploit the remote file inclusion vulnerability by enticing a user to click on a link with a malicious parameter...

WordPress GD bbPress Attachments Plugin <= 2.2 - Directory Traversal

This vulnerability allows a remote administrator to include and execute arbitrary local files in the "tab" parameter in the gdbbpressattachments page to wp-admin/edit.php. Solution Update the plugin...

DedeCMS < 5.7-sp1 - Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ========================== Exploit Title: Dedecms variable coverage leads to getshell Date: 26-06-2015 Vendor Homepage: http://www.dedecms.com/ Version: dedecms 5.7-sp1 and all old version CVE : CVE-2015-4553 ===========================...

DeDeCMS 5.7-sp1 - Remote File Inclusion

DeDeCMS 5.7-sp1 - Remote File Inclusion ========================== Exploit Title: Dedecms variable coverage leads to getshell Date: 26-06-2015 Vendor Homepage: http://www.dedecms.com/ Version: dedecms 5.7-sp1 and all old version CVE : CVE-2015-4553 =========================== CVE-2015-4553Dedecms...

DeDeCMS < 5.7-sp1 - Remote File Inclusion

========================== Exploit Title: Dedecms variable coverage leads to getshell Date: 26-06-2015 Vendor Homepage: http://www.dedecms.com/ Version: dedecms 5.7-sp1 and all old version CVE : CVE-2015-4553 =========================== CVE-2015-4553Dedecms variable coverage leads to getshell...

CVE-2015-4726

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...

CVE-2015-4726

AudioShare 2.0.2 is affected by a PHP remote file inclusion in ajax/myajaxphp.php that allows remote attackers to execute arbitrary PHP code via a URL supplied in the config['basedir'] parameter. Root cause appears to be improper handling of config['basedir'], enabling RFI. Severity from referenc...

Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion Vulnerabilities

Audio Share version 2.0.2 suffers from cross site scripting and remote file inclusion vulnerabilities. | Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download :...

Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion

| Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download : http://demo.audiosharescript.com/ ======================================= XSS / HTML Inject :...

Schneider Electric Modicon PLC Vulnerabilities

OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-15-224-02 Schneider Electric Modicon M340 PLC Station P34 Module VulnerabilitiesICS-CERT ALERT, https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-02, web site last accessed September 3, 2015. that was published August 12, 2015...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress Export To Text Plugin <= 2.2 - Remote File Inclusion

This plugin is prone to a remote file inclusion vulnerability. Solution Upgrade the plugin...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to fsml-admin.js.php wpp parameter remote file inclusion vulnerability. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress JS Multi Hotel Plugin <= 2.2.1 - Remote File Inclusion

This plugins is prone to a remote file inclusion vulnerability via includes/showimage.php file parameter. Solution Update the plugin...

WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion

This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...

WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion

This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...

[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI &amp; CSRF Security Vulnerabilities

Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...

Magento Community Edition and Enterprise Edition PHP Remote File Inclusion Vulnerability

Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A PHP remote fi...

Magento Community Edition and Enterprise Edition Directory Traversal Vulnerability

Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A directory...