WordPress N-Media File Uploader Plugin <= 3.7 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...

WordPress N-Media File Uploader Plugin <= 1.9 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...

WordPress ReFlex Gallery Plugin <= 3.1.3 - Unrestricted File Upload

This vulnerability is in admin/scripts/FileUploader/php.php. It allows an attacker to execute arbitrary PHP code by uploading a file with a PHP extension. And then an attacker can access it via a direct request to the file in uploads/ directory. Solution Update the plugin...

DbNinja Flash 3.2.6 Cross Site Scripting

Exploit Title: DbNinja Flash XSS Exploit Google Dork: intitle: Flash XSS Date: May 27, 2015 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.dbninja.com Software Link: www.dbninja.com Version: 3.2.6 Tested on: Windows 7 Category: Flash XSS CVE : NA Source...

WordPress File Uploader Plugin - File Upload

This plugin is prone to PHP file upload vulnerability. Solution Update the plugin...

WordPress SB Uploader Plugin <= 3.9 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution Upgrade this plugin...

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2)

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload 2 !/bin/bash Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Google Dork : inurl:"/uploads/contactfiles/" Exploit Author : Claudio Viviani Vulnerability discovered by : Claud...

WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 - Arbitrary File Upload (2)

!/bin/bash Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Google Dork : inurl:"/uploads/contactfiles/" Exploit Author : Claudio Viviani Vulnerability discovered by : Claudio Viviani Script Written by : F17.c0de Software link :...

WordPress Windows Desktop And iPhone Photo Uploader File Upload Vulnerability

WordPress Windows Desktop and iPhone Photo Uploader plugin suffers from a remote shell upload vulnerability. Exploit Title : Wordpress plugin Windows Desktop and iPhone Photo Uploader arbitrary file upload vulnerbility Author : Manish Kishan Tanwar AKA error1046 Home Page :...

WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload

WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload Exploit Title : Wordpress plugin Windows Desktop and iPhone Photo Uploader arbitrary file upload vulnerbility Author : Manish Kishan Tanwar AKA error1046 Home Page :...

WordPress Plugin Windows Desktop and iPhone Photo Uploader - Arbitrary File Upload

Exploit Title : Wordpress plugin Windows Desktop and iPhone Photo Uploader arbitrary file upload vulnerbility Author : Manish Kishan Tanwar AKA error1046 Home Page : https://wordpress.org/plugins/i-dump-iphone-to-wordpress-photo-uploader/ Download Link :...

Windows Desktop And iPhone Photo Uploader <= 1.8 - File Upload

The i-dump-iphone-to-wordpress-photo-uploader WordPress plugin was affected by a File Upload security vulnerability...

WordPress InBoundio Marketing Plugin 1.0 /admin/partials/csv_uploader.php 文件上传漏洞

/admin/partials/csvuploader.php?php $ds = DIRECTORYSEPARATOR; //1 $storeFolder = 'uploadedcsv'; //2 if !empty$FILES $FILES'file''name' = pregreplace'/^A-Za-z0-9 .-/', '', $FILES'file''name'; $FILES'file''name' = pregreplace'/\s+/', '', $FILES'file''name'; $tempFile = $FILES'file''tmpname'; //3...

Unrestricted file upload

Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors...

CVE-2015-2087

Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors...

CVE-2015-2087

CVE-2015-2087: Drupal Avatar Uploader module (6.x-1.x) before 6.x-1.3 has an unrestricted file upload flaw due to inadequate file-extension validation, enabling remote authenticated users to upload a PHP file and execute code via unspecified vectors. The fixed version is Avatar Uploader 6.x-1.3. ...

CVE-2015-2087

Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors...

Drupal Avatar Uploader Arbitrary File Upload Vulnerability

Drupal is an open source content management platform. An arbitrary file upload vulnerability exists in Drupal Avatar Uploader, which allows attackers to exploit the vulnerability to upload arbitrary files and execute scripts and code...

SA-CONTRIB-2015-048 - Avatar Uploader - Arbitrary PHP code execution

Avatar Uploader module provides an alternative way to upload user pictures. The module doesn't sufficiently enforce file extensions when an avatar is uploaded, allowing users to bypass Drupal's normal file upload protections to install malicious HTML or executable code to the server. This...

Mail.ru: Same Origin Policy bypass

Hi, After small investigation I've probably found something that can be exploited to bypass Same Origin Policy on mail.ru services specially your main domain and e.mail.ru. First of all - let's take a look about your crossdomain.xml both for mail.ru and e.mail.ru: After time spent on searching...