CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

Sql injection

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

PT-2015-3639

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the id parameter in the "download.php" or "main.php" API endpoints. Recommendations For Ganesha Digit...

CVE-2014-100031: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2014-9581

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information...

PT-2015-4291

Name of the Vulnerable Software and Affected Versions Codiad version 2.4.3 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the path parameter of the download.php file in the components/filemanager directory...

CVE-2014-9581: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information...

CVE-2014-9119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

PT-2014-8837

Name of the Vulnerable Software and Affected Versions DB Backup plugin versions 4.5 and earlier for Wordpress Description A directory traversal issue in the download.php file of the DB Backup plugin allows remote attackers to read arbitrary files by using a .. dot dot in the file parameter...

PT-2014-8632

Name of the Vulnerable Software and Affected Versions WordPress Download Manager plugin for WordPress affected versions not specified Description A directory traversal issue exists in the WordPress Download Manager plugin, allowing remote attackers to read arbitrary files. This is achieved by...

WordPress Antioch Arbitrary File Download Vulnerability

WordPress Antioch theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Antioch Theme...

WordPress Theme Antioch - 'download.php' Arbitrary File Download

source: https://www.securityfocus.com/bid/69673/info Antioch theme for Wordpress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information...

CVE-2014-5465

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5465

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5465

The CVE-2014-5465 issue affects the WordPress ShortCode Plugin (Download ShortCode) version 0.2.3 and earlier, where force-download.php is vulnerable to directory traversal via a .. in the file parameter, enabling reading arbitrary local files. OpenVAS/PRION/CVE references corroborate a Local Fil...

PT-2014-6493

Name of the Vulnerable Software and Affected Versions Download Shortcode plugin versions 0.2.3 and earlier Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter. This is a directory traversal vulnerability in the force-download.php file...

CVE-2014-5465: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

Directory traversal

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...