CVE-2014-9734: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Slider Revolution revslider plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php...

CVE-2014-9735: Undefined Security Weakness

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

WordPress Slider Revolution Plugin <= 3.0.95 - Multiple Vulnerabilities

Because of these vulnerabilities, the attackers can upload and execute arbitrary files, create, update, import or export arbitrary sliders via unspecified vectors, also, delete arbitrary sliders. Solution Update the plugin...

MODX Revolution 2.3.3-pl Cross Site Scripting

Affected Vendor: http://modx.com/ Date: 08/05/2015 Creditee: http://osvdb.org/creditees/13518-vadodil-joel-varghese Type of vulnerability: Multiple Cross Site Scripting Vulnerability Tested on: Windows 8.1 Product: MODX Revolution Version: 2.3.3-pl "Content" field in create new resources...

WordPress Slider Revolution Shell Upload

Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...

WordPress Revolution Slider File Upload

Exploit Title: Wordpress Plugin Revolution Slider - Unrestricted File Upload Google Dork: Y0ur Brain Date: 27.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://revolution.themepunch.com/ Version: old Tested on: Windows Path of File :...

WordPress Slider Revolution Arbitrary File Download Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/27513...

WordPress Slider Revolution Plugin <= 4.1.4 - Arbitrary File Download

WordPress Slider Revolution plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium plugin Dork Google: revslider.php "index...

NPDS Revolution SQL Injection Vulnerability

NPDS Revolution is a content and community management system CMS. The system supports search engine optimization, group and workspace management, multiple themes, and more. A SQL injection vulnerability exists in the search.php script in NPDS Revolution version 13. A remote attacker can exploit...

CVE-2015-1400

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

Sql injection

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2015-1400

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2015-1400

NPDS Revolution 13 (NPDS CMS Revolution-13) contains a SQL injection vulnerability in search.php that can be exploited via the query parameter to execute arbitrary SQL commands. The issue is described across multiple sources as a remote SQL injection affecting NPDS Revolution 13, with the root ca...

CVE-2015-1400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query parameter...

NPDS CMS Revolution-13 SQL Injection Vulnerability

NPDS CMS Revolution-13 suffers from a remote SQL injection vulnerability. Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12...

NPDS CMS Revolution-13 SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

WordPress Revolution Slider Local File Disclosure Vulnerability

WordPress Revolution Slider plugin suffers from a local file disclosure vulnerability. Note that this finding houses site-specific data. + Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage:...

WordPress Revolution Slider Local File Disclosure

Title: Wordpress slider reolusion local file download + Date: 2015-01-25 + Author: JOK3R + Vendor Homepage: https://wordpress.org/plugins/patch-for-revolution-slider/ + Tested on: windows 7 / firefox , kali linux / firefox + Vulnerable Files: /plugins/revolution-slider/ + Dork : "Index of"...