dotProject 2.1.6 - Remote File Inclusion

dotProject 2.1.6 - Remote File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: "PHP web-base...

WordPress Plugin Advanced Custom Fields Remote File Inclusion

This module exploits a remote file inclusion flaw in the WordPress blogging software plugin known as Advanced Custom Fields. The vulnerability allows for remote file inclusion and remote code execution via the export.php script. The Advanced Custom Fields plug-in versions 3.5.1 and below are...

dotProject <= 2.1.6 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: "PHP web-based project management framework that includes modules for companies, projects, tasks with Gantt charts, forums, files,...

WordPress Plugin social discussions 6.1.1 - Multiple Vulnerabilities

waraxe-2012-SA093 - Multiple Vulnerabilities in Wordpress Social Discussions Plugin ====================================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-93.html...

WordPress Plugin social discussions 6.1.1 - Multiple Vulnerabilities

WordPress Plugin social discussions 6.1.1 - Multiple Vulnerabilities waraxe-2012-SA093 - Multiple Vulnerabilities in Wordpress Social Discussions Plugin ====================================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012...

WordPress Social Discussions Plugin 6.1.1 - Multiple Vulnerabilities

WordPress Social Discussions plugin is prone to remote file inclusion and full path disclosure in multiple scripts vulnerabilities. Solution Update the plugin...

WordPress Social Discussions Plugin 6.1.1 - Multiple Vulnerabilities

WordPress Social Discussions plugin is prone to remote file inclusion and full path disclosure in multiple scripts vulnerabilities. Solution Update the plugin...

[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin

waraxe-2012-SA093 - Multiple Vulnerabilities in Wordpress Social Discussions Plugin ====================================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-93.html...

WordPress Social Discussions Plugin Multiple Vulnerabilities

WordPress Social Discussions Plugin is prone to remote file inclusion and full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Wordpress Social Discussions 6.1.1 File Inclusion / Path Disclosure

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-93.html Description of vulnerable target: Enables Social Sharing of your blog posts to 30+ Social Networks. Plugin also enables you to Automatically Publis...

WordPress Plugin Crayon Syntax Highlighter - wp_load Remote File Inclusion

WordPress Plugin Crayon Syntax Highlighter - wpload Remote File Inclusion source: https://www.securityfocus.com/bid/55919/info The Crayon Syntax Highlighter plug-in for WordPress is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Crayon Syntax Highlighter <= 1.12 - Remote File Inclusion

The Crayon Syntax Highlighter WordPress plugin was affected by a Remote File Inclusion security vulnerability...

WordPress Plugin Crayon Syntax Highlighter - 'wp_load' Remote File Inclusion

source: https://www.securityfocus.com/bid/55919/info The Crayon Syntax Highlighter plug-in for WordPress is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive...

WordPress Crayon Syntax Highlighter - Remote File Inclusion

WordPress Crayon Syntax Highlighter plugin's "wpload" parameter is prone to a remote file include vulnerability. It allows an attacker o compromise the application and the underlying system. Other attacks are also possible. Solution Update the plugin...

CVE-2011-4342

PHP remote file inclusion vulnerability in wpxmlexport.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter...

CVE-2011-4342

The CVE-2011-4342 vulnerability affects the BackWPup WordPress plugin, specifically the wp_xml_export.php component. It allows remote PHP code execution via a URL in the wpabs parameter due to insecure handling in the BackWPup plugin versions prior to 1.7.2. If exploited, an attacker could run ar...

Directory traversal

Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the icmsConfigPluginssanitizerplugins parameter...

CVE-2012-5293

SAPID CMS 1.2.3 Stable is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL in the GLOBALS[root_path] (usr/extensions/get_tree.inc.php) or root_path (usr/extensions/get_infochannel.inc.php) parameters. The vulnerability e...

CVE-2012-5293

Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSrootpath parameter to usr/extensions/gettree.inc.php or 2 rootpath parameter to usr/extensions/getinfochannel.inc.php...

phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Link:...