WordPress Folo Shell Upload

Exploit Title : Wordpress Themes Folo Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/folo Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On : Windows 7...

WordPress Elemin Shell Upload

Exploit Title : Wordpress Themes Elemin Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/Elemin Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On : Window...

PineApp MailSecure - Remote Command Execution

----------------------------------------------------------------- It is possible execute any command bash as qmailq unprivilege user, sending only the following https request, without authentication...

WordPress Highlight Premium Theme CSRF / Shell Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

webAsyst Plugins ImageManager Shell Upload Vulnerability

Exploit for windows platform in category web applications...

WordPress Theme Kernel Shell Upload

Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected File: upload-handler.php Category:...

TinyMCE 3.2.7 SQL Injection / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

WordPress ThisWay Shell Upload Vulnerability

WordPress ThisWay theme suffers from a remote shell upload vulnerability. Exploit title: WordPress ThisWay theme - Arbitrary File Upload Vulnerability Author: Bet0 Google Dork: inurl:"/wp-content/themes/ThisWay/" Date:1 November 2013 Vendor Homepage: http://themeforest.net/ Themes Link:...

WordPress Think Responsive 1.0 Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Think Responsive Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 11/01/2013 Vendor Homepage:...

TinyMCE v3.2.x <= (AuthBypass/ShellUpload) Multiple Vulnerabilites

TinyMCE v3.2.7 or ..X is suffer from Multiple vuln's / bug :p Remote Attacker can bypassin auth and upload files , shell's etc... 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

Joomla Joomleague component Shell Upload Vulnerability

Joomla Joomleague component suffers from a remote shell upload vulnerability due to having Open Flash Chart included. Exploit Title: joomla comjoomleague execute arbitrary PHP code Exploit Google Dork: inurl:comjoomleague Date: 01-11-2013 Exploit Author: wantexz Vendor...

WordPress WP-Checkout Cross Site Scripting / Shell Upload

Title : Wordpress Plugin wp-checkout XSS / Arbitrary File Upload Author : DevilScreaM Date : 10/31/2013 Category : Web Applications Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber Thanks :...

WordPress GeoPlaces 4.x Shell Upload

Title : Wordpress GeoPlaces 4.x Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/24/2013 Category : Web Applications Type : PHP Version : 4.x Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian...

WordPress Daily Deal Theme - Arbitrary Shell Upload Vulnerability

Daily Deal theme is prone to an arbitrary shell upload vulnerability that exists because application fails to adequately clean up user-supplied input. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the theme...

WordPress DailyDeal Theme Shell Upload

Title : WordPress DailyDeal Themes Shell Upload Vulnerabillity Author : DevilScreaM Date : 10/23/2013 Category : Web Applications Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber Thanks :...

WordPress WPLocalPlaces Shell Upload

. \ /| | \ \ \ \ | | | | / \ / \ | / \ / / / / / \ | / \ / / / | | | Y \ / \ | | \ /\ \ \ | | | /\ / || || /\ \ /| / /// \ /| \ // / / / / / / INDO-PENDENT HACKER http://thecrowscrew.org Exploit Title : Wordpress Themes WPLocalPlaces Upload Vulnerability Google Dork :...

Automne CMS 4.4.1 Shell Upload

----------------------------------------------------------------------- Automne CMS fckeditor Arbitrary File Upload Vulnerability ----------------------------------------------------------------------- Author : syst3mf4ult Homepage : http://www.automne-cms.org/ Vendor : http://www.automne-cms.org...

WordPress Plugin Woopra Analytics - &#039;ofc_upload_image.php&#039; Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/62876/info The Woopra Analytics Plugin for WordPress is prone to an arbitrary PHP code-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary PHP code within the context o...

Empire cms 7.0 background to get shell-vulnerability warning-the black bar safety net

Empire CMS7. 0 background can upload the mod suffix PHP file and execute inside php code. Into the backgroundit! Method a: system data tables with the system model-management data table and then randomly selected one data table, open the corresponding data table of the“management system model”as...

ClipBucket Remote Code Execution

. \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://thecrowscrew.org Exploit title : ClipBucket Remote Code Execution Vulnerability Author : Gabby Dork = use ur brain ;...