Joomla XCloner Backup 3.5.3 Plugin - Local File Inclusion (Authenticated) Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Authenticated Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference:...

Joomla XCloner Backup 3.5.3 Local File Disclosure

Exploit Title: Joomla XCloner Backup - Authenticated Local File Disclosure Date: 10.05.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Vendor Homepage:...

Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)

Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Authenticated Date: 2020-05-10 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Vendor...

Joomla! XCloner Component Information Disclosure Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. xCloner is used in one of the website backup and restore components. A security vulnerability exists in the XCloner component of Joomla! An attacker can exploit this vulnerability to obtain loca...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Arbitrary file deletion

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

CVE-2020-13424 affects the Joomla! XCloner component, prior to 3.5.4. The vulnerability is an authenticated local file disclosure via a path traversal in the download functionality of the XClonerBackup component (case 'download'), where the parameter file is used to read arbitrary server files (e...

XCloner - Backup and Restore < 3.1.5 - Authenticated Path Traversal

Authenticated users are able to perform directory listings at any location available to the Wordpress user, leaking filenames of previous backups. This was found in XCloner - Backup and Restore version 3.1.4, but may have been introduced in earlier versions. Attackers can leverage directory...

XCloner - Backup and Restore < 3.1.5 - Authenticated Path Traversal

Authenticated users are able to perform directory listings at any location available to the Wordpress user, leaking filenames of previous backups. This was found in XCloner - Backup and Restore version 3.1.4, but may have been introduced in earlier versions. Attackers can leverage directory...

WordPress XCloner - Backup and Restore plugin <= 3.1.4 - Authenticated Path Traversal

This plugin is prone to an authenticated path traversal vulnerability. It allows attackers to leverage directory listings to leak otherwise secret file paths to previous backups and acquire full backup contents. Solution Update the plugin to the latest version...

WordPress XCloner Plugin <= 3.1.4 - Cross-Site Request Forgery (CSRF)/File Deletion Vulnerability

WordPress XCloner Plugin is vulnerable to Cross-Site Request Forgery CSRF/File Deletion Vulnerability. There's no nonce check for file deletion, but it you need to be logged in as Administrator to do it. Solution Update the plugin...

WordPress XCloner 3.1.5 Denial Of Service / Code Execution Vulnerabilities

WordPress XCloner plugin versions 3.1.5 and below suffer from remote command execution and denial of service vulnerabilities. Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit...

WordPress XCloner 3.1.5 Denial Of Service / Code Execution

Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: www.xcloner.com Software Link:...

WordPress Plugin 'XCloner' 3.1.5 - Multiple Vulnerabilities

WordPress Plugin 'XCloner' 3.1.5 - Multiple Vulnerabilities. Webapps exploit for PHP platform Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit Author: Felipe Molina @felmoltor...

WordPress XCloner Plugin Static Code Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that supports personal blog sites on servers with PHP and MySQL.XCloner is a plugin for backing up and restoring data and databases. A static code injection vulnerability exists in WordPress Xcloner that allows remote attackers to...

CVE-2015-4338

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LMFRONT field for a language, as demonstrated by language/italian.php...

CVE-2015-4337

Cross-site scripting XSS vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the exclmanual parameter in the xclonershow page to wpadmin/plugins.php...

CVE-2015-4336

cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames with shell metacharacters, as demonstrated by using the backup comments feature to create the file...