svg-vector-icon-plugin WP SVG Icons ZIP Upload

The vulnerability of the svg-vector-icon-plugin WP SVG Icons plugin for WordPress lies in insufficient validation of the requests being made. Exploiting this vulnerability could allow a malicious actor to download a arbitrary ZIP archive containing a.php file remotely...

PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) RFI Vulnerability

No description provided by source. Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powered by phpMyDesktop|arcade v1.0...

PT-2011-2415

Name of the Vulnerable Software and Affected Versions E-PROMPT C BetMore Site Suite versions 4.0 through 4.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the mainx a.php file. Recommendations For versions 4.0 through...

CVE-2009-3219: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...