MediaSuite.ca File Disclosure

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://twitter.com/h4SEC / \ | \ \ Proof Video: https://www.youtube.com/watch?v=7yxbfD1YK8Y / // / \ / My + Author : KnocKout E-Mail : [email protected] Twitter: http://twitter.com/h4SEC HomePage :...

WordPress Plugin DB_Backup 4.5 /download.php 任意文件下载漏洞

No description provided by source...

CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

Sql injection

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

WordPress Antioch Arbitrary File Download Vulnerability

WordPress Antioch theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme...

WordPress Theme Antioch - 'download.php' Arbitrary File Download

source: https://www.securityfocus.com/bid/69673/info Antioch theme for Wordpress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information...

CVE-2014-5465

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5465

The CVE-2014-5465 issue affects the WordPress ShortCode Plugin (Download ShortCode) version 0.2.3 and earlier, where force-download.php is vulnerable to directory traversal via a .. in the file parameter, enabling reading arbitrary local files. OpenVAS/PRION/CVE references corroborate a Local Fil...

CVE-2014-5465

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

Directory traversal

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2014-5368

CVE-2014-5368 affects the WordPress WP Content Source Control plugin (versions 3.0.0 and earlier). A directory traversal vulnerability exists in the downloadfiles/download.php script where user-controlled input in the path parameter can be navigated with “..” to trigger read access via file_get_c...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

LineNity 1.20 - download.php imgurl Parameter Remote Path Traversal File Access

The linenity WordPress theme was affected by a download.php imgurl Parameter Remote Path Traversal File Access security vulnerability...

SCv1 - download.php file Parameter Traversal Remote File Access

The scv1 WordPress theme was affected by a download.php file Parameter Traversal Remote File Access security vulnerability...

AdminOnline - download.php file Parameter Remote Path Traversal File Access

The adminonline WordPress plugin was affected by a download.php file Parameter Remote Path Traversal File Access security vulnerability...

SS Downloads 1.4.4.1 - templates/download.php Multiple Parameters Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/download.php Multiple Parameters Reflected XSS security vulnerability...

Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access

The Count per Day WordPress plugin was affected by a download.php f Parameter Traversal Arbitrary File Access security vulnerability...

WordPress File Groups plugin <= 1.1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress File Groups plugin = 1.1.2 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/file-groups.1.1.2.zip Version: 1.1.2 tested --- P...