WordPress WP Symposium 14.11 Shell Upload

WP Symposium Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the /wp-symposium/server/fileuploadform.php script does not properly verify or sanitize user-uploaded files. By uploading a .php file, the remote system will pla...

Incom CMS SQL Injection

Exploit Title: Incom Cms Admin Bypass Vulnerability Google Dork: intext:"incom cms" . intext:"site by overron" . intitle:"INCOM CMS" Date: 2014-12-29 Exploit Author: Xodiak Vendor Homepage: http://facebook.com/xodiakbalckhat Software Link: http://incomcms.com Version: All Version Tested on: Kali ...

RStickets! 1.0.0 Remote Shell Upload

RStickets! RSTickets!" is no longer sold / developed POC: Upload shell.php.zip from the form and the shell will be uploaded to the server on this path components/comrstickets/files/ and it will be executable May be another versions are vulnerable also to the same vulnerability = XSS In name...

RSform!Pro 1.3.0 Remote Shell Upload

RSform!Pro There is a reflected XSS Vulnerability in the form .. Birthdate parameter alert1337...

Wordpress Wp Symposium 14.11 - Unauthenticated Shell Upload Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Name: Wordpress WP Symposium 14.11 Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Exploit written by Claudio Viviani 2014-11-27: Discovered vulnerability 2014-12-01: Vendor Notification Twitter...

WP Symposium <= 14.11 - Unauthenticated Shell Upload

The wp-symposium WordPress plugin was affected by an Unauthenticated Shell Upload security vulnerability...

Slider Revolution/Showbiz Pro shell upload exploit

!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...

Slider Revolution/Showbiz Pro Shell Upload Exploit

Exploit for php platform in category web applications !/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit...

WordPress Plugin Slider REvolution 3.0.95 Showbiz Pro 1.7.1 - Arbitrary File Upload

WordPress Plugin Slider REvolution 3.0.95 Showbiz Pro 1.7.1 - Arbitrary File Upload !/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published:...

Slider Revolution/Showbiz Pro Shell Upload

!/usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 15 October 2014 Coded: 15 October 2014 Updated: 25 November 2014 Published: 25 November 2014 MorXploit Research http://www.MorXploit.com Vendor: ThemePunch...

WordPress Slider Revolution Plugin 3.0.95 - Shell Upload Exploit

This plugin cannot check authentication in revslideradmin.php/showbizadmin.php which allows an attacker to abuse administrative features for the example, creating or deleting sliders, importing or exporting sliders, etc.. Solution Update the plugin...

wpDataTables <= 1.5.3 - Unauthenticated Shell Upload

The wpDataTables – Tables & Table Charts WordPress plugin was affected by an Unauthenticated Shell Upload security vulnerability...

Gallery Bank <= 3.0.60 - Shell Upload

The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by a Shell Upload security vulnerability...

WordPress Plugin wpDataTables 1.5.3 - Arbitrary File Upload

!/usr/bin/python Exploit Name: Wordpress wpDataTables 1.5.3 and below Unauthenticated Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Date : 2014-11-22 Exploit written by Claudio Viviani Video Demo: https://www.youtube.com/watch?v=44m4VNpeEVc...

iBanking botnet Shell Upload Vulnerability

Exploit for php platform in category web applications FiLEZ: 0day.today 2018-03-28...

Atrax Botnet Shell Upload Vulnerability

Exploit for php platform in category web applications import random import string import base64 import urllib import urllib2 payload = '' url = 'http://localhost/atrax/' BOTMODEINSERT = 'b' BOT MODE BOTMODERUNPLUGIN = 'e' GETPARAMMODE = 'a' GET PARAM POSTPARAMGUID = 'h' POST PARAM POSTPARAMIP = '...

WordPress wpDataTables 1.5.3 Shell Upload

!/usr/bin/python Exploit Name: Wordpress wpDataTables 1.5.3 and below Unauthenticated Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Date : 2014-11-22 Exploit written by Claudio Viviani Video Demo: https://www.youtube.com/watch?v=44m4VNpeEVc...

Wordpress wpDataTables 1.5.3 shell Upload Exploit

The wordpress premium plugin wpDataTables 1.5.3 and below suffers from Unauthenticated Shell Upload Vulnerability !/usr/bin/python Exploit Name: Wordpress wpDataTables 1.5.3 and below Unauthenticated Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Date : 2014-11-22 Exploit...

Videos Tube 2.0 SQL Injection / XSS / Shell Upload

Videos Tube 2.0 / || / / / KnocKout, Septemb0x , BARCOD3 , UnDeRTaKeR / /\ /\ \ \ \ | / \ / Turkey / \ | \ \ / // / \ / / / / Software info |Web App. : Videos Tube |Price : FREE |Version : 2.0, updated the lastest version. |Software: http://www.phpscriptlerim.com/ucretsiz/videos-tube.html...

Digi Online Examination System 2.0 Shell Upload

Exploit Title: Digi Online Examination System Unrestricted File Upload Vulnerability Date: 12-10-2014 Exploit Author: Halil Dalabasmaz Version: v2.0 Software Link: http://codecanyon.net/item/digi-online-examination-system-does/8610180 Software Test Link: http://s1.digitalvidhya.com/doesv2/...