30284 matches found
WordPress Video Conference Integration Plugin <= 4.91.8 - Remote File Upload
./videowhisper-video-conference-integration/vc/vwupload.php allows various remote unauthenticated file uploads. Anyone can upload the following files to an unsuspecting wordpress site. Solution Upgrade plugin...
WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion
This plugin is prone to fsml-admin.js.php wpp parameter remote file inclusion vulnerability. It allows attackers to obtain sensitive information. Solution Update plugin...
WordPress JS Multi Hotel Plugin <= 2.2.1 - Remote File Inclusion
This plugins is prone to a remote file inclusion vulnerability via includes/showimage.php file parameter. Solution Update the plugin...
WordPress Export To Text Plugin <= 2.2 - Remote File Inclusion
This plugin is prone to a remote file inclusion vulnerability. Solution Upgrade the plugin...
WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion
This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...
WordPress Video Conference Integration Plugin <= 4.91.8 - Remote File Upload
./videowhisper-video-conference-integration/vc/vwupload.php allows various remote unauthenticated file uploads. Anyone can upload the following files to an unsuspecting wordpress site. Solution Upgrade plugin...
WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion
This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...
WordPress Browser Rejector Plugin <= 2.10 - Remote & Local File Inclusion
This plugin is prone to remote and local file Inclusion vulnerability. Solution Update the plugin...
Avsarsoft Matbaa Script - Multiple Vulnerabilities
Title : Avsarsoft Matbaa Script - Multiple Vulnerabilities Author : ZoRLu / [email protected] Website : milw00rm.com / milw00rm.net / milw00rm.org Twitter : https://twitter.com/milw00rm or @milw00rm Test : Windows7 Ultimate Discovery : 15/04/15 Publish : 23/04/15 Thks : exploit-db.com,...
[CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities
Exploit Title: Landesk Management Suite RFI and CSRF vulnerabilities Product: Landesk Management Suite Vulnerable Versions: 9.5 and possible previous versions, 9.6 Tested Version: 9.5 Advisory Publication: 16/04/2015 Latest Update: 16/04/2015 Vulnerability Type: Cross-site request forgery CWE-352...
[SECURITY] [DSA 3250-1] wordpress security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3250-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 04, 2015 http://www.debian.org/security/faq -...
Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8
Title: Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8 Author: Larry W. Cashdollar, @larry0 Date: 2015-03-29 Download Site: https://wordpress.org/support/plugin/videowhisper-video-conference-integration Vendor: http://www.videowhisper.com/...
Magento Mage_Adminhtml_Block_Report_Search_Grid Class 'popularity' Parameter SQLi
The Magento application running on the remote web server is affected by a SQL injection vulnerability due to failing to properly sanitized the user-supplied range inputs to the 'popularity' parameter of the MageAdminhtmlBlockReportSearchGrid class. An unauthenticated, remote attacker can exploit...
Unspecified vulnerability in Pydio (CNVD-2015-03022)
AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...
Unspecified vulnerability in Pydio (CNVD-2015-03021)
AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...
CVE-2015-1155
The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site...
Magento Community Edition and Enterprise Edition PHP Remote File Inclusion Vulnerability
Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A PHP remote fi...
Magento Community Edition and Enterprise Edition Directory Traversal Vulnerability
Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A directory...
Remote file inclusion
PHP remote file inclusion vulnerability in the fetchView function in the MageCoreBlockTemplateZend class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPa...
CVE-2015-1399
PHP remote file inclusion vulnerability in the fetchView function in the MageCoreBlockTemplateZend class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPa...