WordPress Mailcwp 1.99 Shell Upload Exploit

WordPress Mailcwp plugin version 1.99 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in mailcwp v1.99 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-09 Download Site: https://wordpress.org/plugins/mailcwp/ Vendor: CadreWorks Pty Ltd...

WordPress ACF Frontend Display Shell Upload

+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Tested on: KaliLinux + Friendly Sites: sec4ever.com + Twitter: @TCYB3R...

Elitenetwork Advanced Social Network Script Shell Upload

| Title : Elitenetwork Advanced Social Network Script Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright © 2015 Elitenetwork. All rights reserved. Powered by Elitecode. | Tested on: win8.1 Fr V.Pro 23:19 22/05/2015 | Download :...

Five Cars Information Technology (Beijing) Limited Library System File Upload Vulnerability

Five Cars Information Technology Beijing Co., Ltd. has been committed to the application of the field of digital publishing, providing related products technology and services. A file upload vulnerability exists in the library system/5clib/ebookupload/ebookupload.jsp of Five Cars Information...

Enterprise-level CRM system SuiteCRM file upload vulnerability report with EXP-a vulnerability warning-the black bar safety net

SuiteCRM is an affordable and easy-to-use enterprise-grade CRM, SuiteCRM is designed to help your business to thousands of passenger enables the user to communicate, share sales information, facilitate transactions and keep the customer happy. Thousands of businesses every day to use Sugar to...

WordPress Shopping Cart Plugin <= 8.1.14 - Multiple Vulnerabilities

This plugin is prone to a shell upload and SQL injection vulnerabilities. Solution Update plugin...

WordPress Drag & Drop Plugin <= 1.1.4 - Shell Upload

This plugin is prone to shell upload vulnerability. Solution Update the plugin...

WordPress Amerisale Re Plugin - Remote Shell Upload

This plugin is prone to a remote shell upload vulnerability. Solution Update the plugin...

WordPress Zingiri Web Shop Plugin <= 2.4.3 - Shell Upload

This plugin is prone to a shell upload vulnerability. Solution Update the plugin...

WordPress AllWebMenus Plugin <= 1.1.9 - Shell Upload

This plugin is prone to PHP shell upload vulnerability. Solution Update the plugin...

WordPress Annonces Plugin <= 1.2.0.1 - Shell Upload

This plugin is prone to a shell upload vulnerability. Solution Update plugin...

WordPress ReFlex Gallery Plugin <= 1.3 - Shell Upload

This plugin is prone to a shell upload vulnerability. Solution Update plugin...

WordPress Leaflet Maps Marker Pro Plugin - Multiple Vulnerabilities

This plugin is prone to SQL injection, cross site scripting, shell upload and file deletion vulnerabilities. Solution Update the plugin...

WordPress Ajax Multi Upload Plugin <= 1.1 - Shell Upload

This plugin is prone to shell upload vulnerability. Solution Update plugin...

WordPress Drag & Drop Plugin <= 1.1.4 - Shell Upload

This plugin is prone to shell upload vulnerability. Solution Update the plugin...

WordPress FCKeditor Deans With Pwwangs Code Plugin <= 1.0.0 - Remote Shell Upload

This plugin is prone to remote shell upload vulnerability. Solution Update the plugin...

WordPress Ajax Multi Upload Plugin <= 1.1 - Shell Upload

This plugin is prone to shell upload vulnerability. Solution Update plugin...

WordPress Slider Revolution Shell Upload

Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...

Showbiz Pro <= 1.7.1 - Shell Upload

The showbizpro WordPress plugin was affected by a Shell Upload security vulnerability...

ProjectSend r561 CSRF / XSS / Shell Upload

Author: TUNISIAN CYBER + Title: ProjectSend Multiple Vulnerabilities + Date: 25-04-2015 + Vendor: http://www.projectsend.org/ + Download:http://www.projectsend.org/download/67/ + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R It's a long one so let's start... I/ CSRF: Add Admin...