19436 matches found
[WAppEx v2.0] Web Application Exploitation Tool
WAppEx is an integrated Web Application security assessment and exploitation platform designed with the whole spectrum of security professionals to web application hobbyists in mind. It suggests a security assessment model which revolves around an extensible exploit database. Further, it...
WordPress Social Media Widget Plugin <= 4.0 - Remote File Inclusion
This plugin contains a Trojan Horse, which allows the attackers to force the upload of arbitrary files. Solution Update the plugin...
Prizm Content Connect default.aspx document Parameter Remote File Inclusion
The remote web server hosts Prizm Content Connect, a fully customizable document viewer. The 'default.aspx' script included with the install fails to sanitize user input to the 'document' parameter before reading a file. A remote attacker can leverage this issue to view arbitrary files or execute...
Gallery Plugin for WordPress 'load' Parameter Remote File Inclusion
The Gallery Plugin for WordPress installed on the remote host is affected by a remote file inclusion vulnerability because it fails to properly sanitize user-supplied input to the 'load' parameter of the 'updateorder.php' script. This vulnerability allows an unauthenticated, remote attacker to vi...
SiteGo Local File Inclusion / Cross Site Scripting
Exploit Title: SiteGo Multiple Vulnerabilities Date: 02/07/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link: http://site-go.com/free/site-go.zip Tested on: Linux/Windows Multiple Local File Inclusion :...
SiteGo Local File Inclusion / Cross Site Scripting Vulnerabilities
SiteGo suffers from cross site scripting and local file inclusion vulnerabilities. Exploit Title: SiteGo Multiple Vulnerabilities Date: 02/07/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link:...
Wordpress Gallery插件'load'参数远程文件包含漏洞
Bugtraq ID:57650 CVE ID: CVE-2012-4919 WordPress Gallery是一款用于Wordpress的图库插件。 通过"load"参数提交给wp-content/plugins/wordpress-gallery/functions/updateorder.ph的输入在用于包含文件之前缺少校验，允许攻击者利用漏洞包含远程文件，并以WEB权限执行任意代码。 0 WordPress Gallery Plugin 1.x 厂商解决方案 目前没有详细解决方案提供：...
Floating Social Media Links Plugin for WordPress 'wpp' Parameter Remote File Inclusion
The Floating Social Media Links Plugin for WordPress installed on the remote host is affected by a remote file inclusion vulnerability due to a failure to properly sanitize user-supplied input to the 'wpp' parameter of the 'fsml-hideshow.js.php' script. This vulnerability could allow an...
WordPress Browser Rejector Plugin Remote File Inclusion Vulnerability
WordPress Browser Rejector Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress Browser Rejector 插件"wppath"远程文件包含漏洞
Browser Rejector可以提示或阻止用户使用旧版本的Web浏览器。 Browser Rejector 2.10及之前版本没有正确验证wp-content/plugins/browser-rejector/rejectr.js.php内的"wppath" GET参数，可被利用包含本地或外部的任意文件。 0 WordPress Browser Rejector 2.x 厂商补丁： WordPress --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Webimage Remote Shell Upload
Title : Webimage Remote file inclusion Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: Sat Jan 5/2013 6.44 pm Vendor: - Type : Web Apps Tested on : Ubuntu / Window XP Dork :...
WordPress Advanced Custom Fields Remote File Inclusion
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress Plugin Advanced Custom Fiel...
WordPress Plugin Advanced Custom Fields - Remote File Inclusion (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WordPress Plugin Advanced Custom Fiel...
WordPress Advanced Custom Fields Plugin - Remote File Inclusion
WordPress Advanced Custom Fields plugin is prone to a remote file inclusion vulnerability. It allows for remote file inclusion and remote code execution via the export.php script. Solution Update the plugin...
WordPress E-Commerce Shop Styling Plugin <= 1.7 - Remote File Inclusion
Because of this vulnerability in includes/generate-pdf.php, the attackers can execute arbitrary PHP code via a URL in the "dompdf" parameter. Solution Update the plugin...
Advanced Custom Fields Plugin for WordPress 'acf_abspath' Parameter Remote File Inclusion
The version of the Advanced Custom Fields plugin for WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'acfabspath' parameter of its 'core/actions/export.php' script. A remote, unauthenticated attacker can exploit this issue to view arbitrary files or...
Thaiweb <= Remote File Inclusion / Sql Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Thaiweb = Remote File Inclusion Vulnerability Date: 19/12/2012 Author: GoLdM Libyan Page FaceBook http://www.facebook.com/pages/وَذَكِّـــرْ/337878286310383 Category:: Local File Disclosure Vulnerability Google Dork:...
WordPress Floating Social Media Links Plugin 'wpp' RFI Vulnerabilities
WordPress Floating Social Media Links Plugin is prone to remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
dotProject 2.1.6 Remote File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: "PHP web-based project management framework that...
dotProject 2.1.6 - Remote File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: "PHP web-based project management framework that...