WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress WP Upload Restriction plugin 2.2.3 and pri...

PT-2020-16138 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 through 3.5.13 Moodle versions 3.7 through 3.7.7 Moodle versions 3.8 through 3.8.4 Moodle versions 3.9 through 3.9.1 Description: A vulnerability was found in Moodle where users with Log in as capability in a course contex...

WordPress slideshow plugin RevSlider exploit-vulnerability warning-the black bar safety net

Any read: /wp-admin/admin-ajax. php? action=revslidershowimage&img=../wp-config.php Any upload: !/ usr/bin/perl Title: Slider Revolution/Showbiz Pro shell upload exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 5 October 2 0 1 4 Coded: 1 5 October 2 0 1 4 Updated: 2 5...

Lian Li NAS - Multiple Vulnerabilities

Exploit Title: Lian Li NAS Multiple vulnerabilities Date: 21/07/2014 Exploit Author: pws Vendor Homepage: http://www.lian-li.com/en/dtportfoliocategory/nas/ Firmware Link: https://www.dropbox.com/s/imvkndl8m5yj7qp/G5S604121826700.tar.gz Tested on: Latest version CVE : None yet 1. Hardcoded cookie...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

Virtual Real Estate Manager 3.5 SQL Injection

====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Virtual Real Estate Manager V 3.5 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Virtual Real Estate Manager V 3.5 SQL Injection Vulnerability =============================================================...

Virtual Real Estate Manager 3.5 - SQL Injection

====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor url...

Guestbook PHP Cross Site Scripting

Exploit Title: Guestbook PHP XSS Vulnerability Date: 24.04.2010 Author: Valentin Category: webapps/0day Version: 1.2.8 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Guestbook PHP XSS...

maianevents-cookie.txt

Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Events v2.0 Copyright © 2005-2008 Maian Script World. All Rights Reserved Description: Maian Events v2.0 is suffering from insecure cookie handling...

CVE-2008-2980

Multiple cross-site scripting XSS vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 errormeldung parameter to admin/features/register/register.php, the 2 featurelanguageueberschrift parameter to...

prozilla-editadd.txt

--==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7...

Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==-- --==+================================================================================+==--...

Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability

Exploit for unknown platform in category web applications ============================================================ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability ============================================================...

CVE-2007-0332

1 admin/adminlien.php3 and 2 admin/modif.php3 in liensdynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request...

Current Versions Release History

Current Versions Release History 5.1c2 30-Jun-06 Valid Core License Keys: issued between 01-Jun-2004 and 31-Oct-2004, or on or after 01-Jun-2005. Admin: Lawful Intercept for Signals is implemented. WSSP: now all string prefixes HTML, JAVASCRIPT, etc. support numeric data. XIMSS: the Signal...

edmoBBS SQL inj. vuln.

edmoBBS SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html Vendor:http://www.upyournet.com/edmobbs/index.php affected version: V0.9 and prior Product Description: edmoBBS is not a cluttered and complex board...