WordPress Curvo Themes - CSRF File Upload Vulnerability

No description provided by source. . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes CSRF File Upload Vulnerability Author: Byakuya Date: 10/26/2013 Vendor...

WordPress The Cotton Theme任意文件上传漏洞

Bugtraq ID:65958 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress The Cotton Theme不正确过滤用户提交的上传文件，允许远程攻击者利用漏洞提交特制的文件，并以WEB权限执行。 0 WordPress The Cotton Theme 目前没有详细解决方案提供： http://www.wordpress.org ?php $uploadfile="IeDb.php"; $ch =...

WordPress TheCotton Shell Upload

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

WordPress Theme Dandelion - Arbitrary File Upload

Exploit Title: Wordpress Dandelion Themes Arbitry File Upload Google Dork: inurl:/wp-content/themes/dandelion/ Date: 31/01/2014 Exploit Author: TheBlackMonster Marouane Vendor Homepage: http://themeforest.net/item/dandelion-powerful-elegant-wordpress-theme/136628 Software Link: Not Available...

WordPress Theme Amplus - Cross-Site Request Forgery

Title : Wordpress Amplus Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/amplus-responsive-multilingual-wordpress-theme/ Greetz : 0day-id.c...

WordPress Dimension Cross Site Request Forgery

Title : Wordpress Dimension Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/dimension-retina-responsive-multipurpose-theme/ Greetz :...

WordPress Euclid Cross Site Request Forgery Vulnerability

WordPress Euclid theme suffers from a cross site request forgery vulnerability. Title : Wordpress Euclid V1 Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/17/2013 - 17 November 2013 Category : Web Applications Type : PHP Version : 1.x.x Vendor : http://freelancewp.com Downlo...

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

WordPress radial-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress radial-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/radial/ Infected File:...

WordPress Curvo Themes - Arbitrary Code Execution Vulnerability

http://cxsecurity.com/issue/WLB-2013110082 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support e-mail :...

WordPress Theme Kernel - Arbitrary Code Execution Vulnerability

Exploit for php platform in category remote exploits -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /' \ /'\ /\ \ /'\ /, \ /\/\ \ \ \ \ ,/\ /\ \ //\ \ /' \ /\ //\ Exploit database separated by exploit // type local, remote, DoS, etc. + Site : 1337day.com + Support...

WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload

Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download : http://themeforest.net/item/highlight-powerful-premium-wordpress-theme/168424 Greet...

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Highlight Premium - Cross-Site Request Forgery Arbitrary File Upload Title : Wordpress Highlight Premium Themes CSRF File Upload Vulnerability Author : DevilScreaM Date : 11/10/2013 - 10 November 2013 Category : Web Applications Type : PHP Vendor : http://themeforest.net Download ...

WordPress Army Knife CSRF File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Army Knife CSRF File Upload Vulnerability Author: Bebyyers404 Date: 11/09/2013 Vendor Homepage: http://freelancewp.co Themes Link: http://freelancewp.com/wordpress-theme/army-knife/ Infected File: upload-handler.php...

WordPress Cubed Themes Remote File Upload Vulnerability

WordPress Cubed Themes suffers from remote file uplaod vulnerability . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Cubed Themes Remote File Upload Vulnerability Author:...

WordPress Theme Kernel - Arbitrary File Upload

Exploit Title: WordPress themekernel-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 6/11/2013 Vendor Homepage: http://www.wikmag.com/ Themes Link: http://themeforest.net/item/kernel-premium-wordpress-blog-magazine-theme-/857077 Infected File: upload-handler.php Category:...

WordPress Curvo Shell Upload

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/28/2013 Vendor Homepage: http://themeforest.net/...

WordPress Curvo Cross Site Request Forgery

. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes CSRF File Upload Vulnerability Author: Byakuya Date: 10/26/2013 Vendor Homepage: http://themeforest.net/ Themes...

WordPress Theme Curvo - Cross-Site Request Forgery Arbitrary File Upload

WordPress Theme Curvo - Cross-Site Request Forgery Arbitrary File Upload . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Curvo Themes CSRF File Upload Vulnerability Author:...

CVE-2011-2745

uploadhandler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote authenticated users to upload a .php file, and consequently execute arbitrary PHP code, via a writepost action to the...