Design/Logic Flaw

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

Remote file inclusion

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

Remote file inclusion

Remote file download in simple-image-manipulator v1.0 wordpress plugin...

Remote file inclusion

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

CVE-2015-1000010

Remote file download in simple-image-manipulator v1.0 wordpress plugin...

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000001

The CVE-2015-1000001 entry maps to WordPress plugin fast-image-adder (v1.1 and earlier). A Remote File Upload vulnerability exists in the uploader script (fast-image-adder-uploader.php), allowing an unauthenticated attacker to upload arbitrary files to the server (potentially leading to web shell...

CVE-2015-1000005

CVE-2015-1000005 affects the WordPress plugin Candidate Application Form (v1.0;

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2015-1000005

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

CVE-2015-1000006

CVE-2015-1000006 corresponds to a remote file download vulnerability in the WordPress plugin recent-backups v0.7. Connected sources confirm a file‑download flaw in the plugin, with OpenVAS and WPVulnDB noting directory traversal/file download risk and WPEX exploit notes that download-file.php doe...

CVE-2015-1000000

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

CVE-2015-1000000

CVE-2015-1000000 affects the MailCWP WordPress plugin (around v1.99/v1.100) via an unauthenticated arbitrary file upload vulnerability. The root cause is improper access control in the upload logic (mailcwp-upload.php), allowing any user to upload a file without authentication or type checks, pot...

CVE-2015-1000013

CVE-2015-1000013 affects WordPress plugin csv2wpec-coupon v1.1. The vulnerability is an arbitrary file upload via csv2wpecCoupon_FileUpload.php caused by improper input sanitization of the uploaded file. The provided PoC indicates unauthenticated remote file upload is possible, using a crafted re...

CVE-2015-1000007

CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...

CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

EUVD-2016-9191

Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...

Picosafe Web GUI - Multiple Vulnerabilities

Picosafe Web GUI - Multiple Vulnerabilities - Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page :...