67 matches found
WordPress Revslider 插件任意文件上传漏洞与任意文件下载漏洞 (SoakSoak)
漏洞描述 据报道，此次SoakSoak恶意软件在大量WordPress站点中的爆发源于一款名为Revslider的幻灯片插件，该插件曾被爆多个安全漏洞，涉及任意文件下载、任意文件上传等。Revslider由ThemePunch出品，属于一款商业性插件（收费），因其具有强大的功能和良好的易用性而有着不错的销量，并且在ThemePunch出品的一些WordPress主题中也自带有该款插件。...
WordPress RevSlider 3.0.3 上传漏洞
No description provided by source...
shilohglobal.com XSS vulnerability
Vulnerable URL: http://shilohglobal.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...
aristotleconsultancy.com XSS vulnerability
Vulnerable URL: http://aristotleconsultancy.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1111328 Google...
smart.org.in XSS vulnerability
Vulnerable URL: http://www.smart.org.in/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
turevosgb.com.tr XSS vulnerability
Open Bug Bounty ID: OBB-83482 Description| Value ---|--- Affected Website:| turevosgb.com.tr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
joannasoh.com XSS vulnerability
Vulnerable URL: http://www.joannasoh.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
georric.com XSS vulnerability
Vulnerable URL: http://georric.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...
poxoreu.mt.gov.br XSS vulnerability
Vulnerable URL: http://www.poxoreu.mt.gov.br/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 26.04.2016 Latest check for patch:| 26.04.2016 11:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
WordPress Revslider Arbitrary File Download Vulnerability
wordpress slider revolution plugin is prone to arbitrary file download vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress Slider Revolution Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A cross-site scripting vulnerability exists in...
WordPress Slider Revolution Plugin Directory Traversal Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A directory traversal vulnerability exists in...
CVE-2014-9734
CVE-2014-9734 describes a directory traversal vulnerability in the WordPress plugin for Slider Revolution (revslider) prior to 4.2. An attacker can cause a revslider_show_image action to wp-admin/admin-ajax.php with a .. in the img parameter to read arbitrary server files. Affected: Slider Revolu...
CVE-2014-9735
The CVE-2014-9735 issue affects WordPress ThemePunch Slider Revolution (RevSlider) before 3.0.96 and Showbiz Pro plugin 1.7.1 and earlier. The root cause is improper restriction of administrator AJAX functionality, enabling unauthenticated remote code execution via file upload and manipulation ac...
CVE-2015-5151
CVE-2015-5151 affects the WordPress Slider Revolution (Revslider) plugin version 4.2.2. The vulnerability stems from inadequate validation/filtering of the client_action parameter in the revslider_ajax_action action called by wp-admin/admin-ajax.php, allowing remote attackers to inject arbitrary ...
WordPress Revslider Arbitrary File Upload / Download / XSS
Exploit Title : WordPress Revslider Arbitrary File Upload, Download & Cross Site Scripting Google Dork : inurl:"/wp-content/plugins/revslider/" Date : 21-06-2015 Exploit Author : CaFc Versace Vendor Homepage : http://revolution.themepunch.com/ Tested on : Windows 7 Contact :...
WordPress Revslider 4.2.2 XSS / Information Disclosure Vulnerabilities
WordPress Revslider plugin version 4.2.2 suffer from cross site scripting, file download, and information disclosure vulnerabilities. Note that this finding houses site-specific data. | Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork :...
WordPress Revslider 4.2.2 XSS / Information Disclosure
| Title : WordPress Revslider 4.2.2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : inurl:admin-ajax.php?action=revslidershowimage -intext:"revslidershowimage" | Tested on: windows 8.1 Français V.Pro | Download : http://revolution.themepunch.com/...
WordPress RevSlider File Upload Remote Code Execution Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload remote code execution vulnerability exists in WordPress RevSlider. The vulnerability allows attackers to upload...
