WordPress Plugin bbPress - Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers and white hats...

WordPress bbPress Plugin - Multiple Vulnerabilities

This bbPress plugin is prone to multiple vulnerabilities such as SQL injection, full path disclosure and directory listing vulnerabilities. Solution Update the plugin...

Wordpress Plugin bbpress Multiple Vulnerabilities

Exploit for php platform in category web applications Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : email protected Greetings to all morocca...

WordPress BBPress SQL Injection / Path Disclosure

No description provided by source. Exploit Title: Wordpress plugins - bbpress Multiple Vulnerabilities. Date: 31 August 2012 Author: Dark-Puzzle Souhail Hammou Vendor Website : www.bbpress.ru / www.bbpress.com Risk : Critical Version: All Versions Google Dork : N/A Category: Webapps/0day Tested o...

WordPress BBPress SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

CVE-2011-3710

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...

Information disclosure

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...

CVE-2011-3710

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...

CVE-2011-3710

The CVE-2011-3710 issue affects bbPress 1.0.2 and is an information disclosure vulnerability. A direct request to a vulnerable PHP file (notably bb-templates/kakumei/view.php and similar files) can reveal the installation path in an error message, exposing sensitive server paths. Multiple connect...

CVE-2011-3710: Exposure of Sensitive Information to an Unauthorized Actor

bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by bb-templates/kakumei/view.php and certain other files...

HTB22904: Path disclosure in bbPress

Vulnerability ID: HTB22904 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbbpress.html Product: bbPress Vendor: http://bbpress.org http://bbpress.org Vulnerable Version: 1.0.3 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Brid...

bbPress 1.0.2 <= Cross Site Scripting Vulnerability

========================================= bbPress 1.0.2 = Cross Site Scripting Vulnerability ========================================= 1. OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain...

bbPress 1.0.2 <= Cross Site Scripting Vulnerability

OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain and simple with a twist from the creators of WordPress. It is focused on web standards, ease of use, ease of integration, and speed. 3...

Installation Path Disclosure Weakness in bbPress

High-Tech Bridge SA Security Research Lab has discovered a weakness in bbPress which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in bbPress The weakness exists due to application reveals the full path to installation directory in...

bbPress 1.0.2 Cross Site Scripting

========================================= bbPress 1.0.2 = Cross Site Scripting Vulnerability ========================================= 1. OVERVIEW bbPress 1.0.2 and lower versions were vulnerable to Cross Site Scripting. 2. APPLICATION DESCRIPTION bbPress is plain and simple forum software, plain...

bbPress 1.0.2 - Cross-Site Request Forgery (Change Admin Password)

bbPress 1.0.2 - Cross-Site Request Forgery Change Admin Password : Software : bbPress v 1.0.2 : : site : www.bbpress.org : : date : 29/6/2010 : : Author : saudi0hacker : : Date : May 25, 2010 : : Type : CSRF : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...

bbPress 1.0.2 - Cross-Site Request Forgery (Change Admin Password)

: Software : bbPress v 1.0.2 : : site : www.bbpress.org : : date : 29/6/2010 : : Author : saudi0hacker : : Date : May 25, 2010 : : Type : CSRF : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : :----------------------------------------------------------------------------:...

bbPress 1.0.2 Cross Site Request Forgery

: Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com admin Key Master Hotmail: Free, trusted and rich email service...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...