315 matches found
bbPress - Multiple Script Malformed Input Path Disclosure
The bbPress WordPress plugin was affected by a Multiple Script Malformed Input Path Disclosure security vulnerability...
bbPress - forum.php page Parameter SQL Injection
The bbPress WordPress plugin was affected by a forum.php page Parameter SQL Injection security vulnerability...
BBpress 0.8.1 BB-Login.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24422/info BBpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...
Wordpress bbpress Plugin - Multiple Vulnerabilities
No description provided by source. Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers a...
bbPress 1.0.2 CSRF Change Admin Password
No description provided by source. : Software : bbPress v 1.0.2 : : site : www.bbpress.org : : date : 29/6/2010 : : Author : saudi0hacker : : Date : May 25, 2010 : : Type : CSRF : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...
WordPress Plugin bbPress - Multiple Vulnerabilities
WordPress Plugin bbPress - Multiple Vulnerabilities Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all...
WordPress Plugin bbPress - Multiple Vulnerabilities
Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers and white hats...
WordPress bbPress Plugin - Multiple Vulnerabilities
This bbPress plugin is prone to multiple vulnerabilities such as SQL injection, full path disclosure and directory listing vulnerabilities. Solution Update the plugin...
Wordpress Plugin bbpress Multiple Vulnerabilities
Exploit for php platform in category web applications Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : email protected Greetings to all morocca...
WordPress BBPress SQL Injection / Path Disclosure
No description provided by source. Exploit Title: Wordpress plugins - bbpress Multiple Vulnerabilities. Date: 31 August 2012 Author: Dark-Puzzle Souhail Hammou Vendor Website : www.bbpress.ru / www.bbpress.com Risk : Critical Version: All Versions Google Dork : N/A Category: Webapps/0day Tested o...
WordPress BBPress SQL Injection / Path Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...
CVE-2011-3710
bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...
Information disclosure
bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...
CVE-2011-3710
bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...
CVE-2011-3710
The CVE-2011-3710 issue affects bbPress 1.0.2 and is an information disclosure vulnerability. A direct request to a vulnerable PHP file (notably bb-templates/kakumei/view.php and similar files) can reveal the installation path in an error message, exposing sensitive server paths. Multiple connect...
HTB22904: Path disclosure in bbPress
Vulnerability ID: HTB22904 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbbpress.html Product: bbPress Vendor: http://bbpress.org http://bbpress.org Vulnerable Version: 1.0.3 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Brid...
bbPress 1.0.2 <= Cross Site Scripting Vulnerability
========================================= bbPress 1.0.2 = Cross Site Scripting Vulnerability ========================================= 1. OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain...
bbPress 1.0.2 <= Cross Site Scripting Vulnerability
OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain and simple with a twist from the creators of WordPress. It is focused on web standards, ease of use, ease of integration, and speed. 3...
Installation Path Disclosure Weakness in bbPress
High-Tech Bridge SA Security Research Lab has discovered a weakness in bbPress which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in bbPress The weakness exists due to application reveals the full path to installation directory in...
bbPress 1.0.2 Cross Site Scripting
========================================= bbPress 1.0.2 = Cross Site Scripting Vulnerability ========================================= 1. OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain...