Lucene search
+L

35 matches found

OSV
OSV
added 2023/01/05 12:0 a.m.40 views

CVE-2023-22622

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation gui...

5.3CVSS5.6AI score
SaveExploits0References9
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.31 views

WeBid <= 0.7.3 RC9 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities -----------------------------------------------------------------------------------------...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2012/10/29 12:0 a.m.58 views

Wordpress 3.4 Cross-Site Scripting Vulnerability

a bug in Wordpress 3.4 that allows to us to occur a Cross-Site Scripting on a Remote machin. Exploit Title : Wordpress 3.4 Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org Security Risk : High Version : Al...

0.5AI score
SaveExploits0
NVD
NVD
added 2011/09/23 11:55 p.m.20 views

CVE-2011-3704

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php...

5CVSS6.1AI score0.01335EPSS
SaveExploits1References3
Prion
Prion
added 2011/09/23 11:55 p.m.23 views

Information disclosure

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php...

5CVSS6.6AI score0.01335EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2011/09/23 11:0 p.m.39 views

CVE-2011-3704

CVE-2011-3704 affects appRain 0.1.0, where a direct request to a PHP file can disclose the installation path in an error message (demonstrated via cron.php). This is an information-disclosure flaw that enables remote attackers to learn sensitive directory structure information. The public records...

5CVSS6.3AI score0.01335EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2011/09/23 11:0 p.m.28 views

CVE-2011-3704

appRain 0.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by cron.php...

6.1AI score0.01335EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2009/03/10 12:0 a.m.40 views

WeBid 0.7.3 Remote File Inclusion

ECHOADV104$2009 ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities ----------------------------------------------------------------------------------------- Author : K-159 Date ...

7.4AI score
SaveExploits0
Prion
Prion
added 2008/01/16 10:0 p.m.19 views

Authentication flaw

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

6.8CVSS7.7AI score0.01229EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2008/01/16 9:0 p.m.28 views

CVE-2008-0293

Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remote attackers to bypass authentication and gain privileges via unspecified vectors related to the showfoot function...

7.1AI score0.01229EPSS
SaveExploits0References3
Prion
Prion
added 2007/08/29 1:17 a.m.20 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in InterWorx Hosting Control Panel InterWorx-CP Webmaster Level SiteWorx 3.0.2 1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php; and allow remote authenticated users to inject arbitrary web script or HT...

4.3CVSS5.7AI score0.01707EPSS
SaveExploits0References22Affected Software1
Prion
Prion
added 2006/05/22 10:2 p.m.20 views

Remote file inclusion

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

7.5CVSS8.1AI score0.02687EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2006/05/22 10:0 p.m.56 views

CVE-2006-2521

PHP remote file inclusion vulnerability CVE-2006-2521 affects phpMyDirectory 10.4.4 and earlier. The flaw is in cron.php where ROOT_PATH is used to include a URL, enabling remote execution of arbitrary PHP code. Exploitation specifics and remediation steps are not provided in the connected docume...

7.5CVSS7.6AI score0.02687EPSS
SaveExploits1References4Affected Software1
zdt
zdt
added 2006/05/19 12:0 a.m.51 views

phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpMyDirectory = 10.4.4 ROOTPATH Remote Inclusion Vulnerability =================================================================== Title : phpMyDirectory = 10.4.4 Remote...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/05/19 12:0 a.m.12 views

phpMyDirectory 10.4.4 - ROOT_PATH Remote File Inclusion

phpMyDirectory 10.4.4 - ROOTPATH Remote File Inclusion Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com -...

0.3AI score
SaveExploits0
Rows per page
Query Builder