CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2014-5368

CVE-2014-5368 affects the WordPress WP Content Source Control plugin (versions 3.0.0 and earlier). A directory traversal vulnerability exists in the downloadfiles/download.php script where user-controlled input in the path parameter can be navigated with “..” to trigger read access via file_get_c...

PT-2014-6434

Name of the Vulnerable Software and Affected Versions WP Content Source Control plugin versions 3.0.0 and earlier Description A directory traversal issue exists in the file get contents function within the downloadfiles/download.php file of the WP Content Source Control plugin. This allows remote...

CVE-2014-5368: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

SCv1 - download.php file Parameter Traversal Remote File Access

The scv1 WordPress theme was affected by a download.php file Parameter Traversal Remote File Access security vulnerability...

LineNity 1.20 - download.php imgurl Parameter Remote Path Traversal File Access

The linenity WordPress theme was affected by a download.php imgurl Parameter Remote Path Traversal File Access security vulnerability...

AdminOnline - download.php file Parameter Remote Path Traversal File Access

The adminonline WordPress plugin was affected by a download.php file Parameter Remote Path Traversal File Access security vulnerability...

SS Downloads 1.4.4.1 - templates/download.php Multiple Parameters Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/download.php Multiple Parameters Reflected XSS security vulnerability...

Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access

The Count per Day WordPress plugin was affected by a download.php f Parameter Traversal Arbitrary File Access security vulnerability...

PT-2014-5973

Name of the Vulnerable Software and Affected Versions SS Downloads plugin versions prior to 1.5 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the templates/download.php file. Recommendations For version...

CVE-2014-4554: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Seo Panel 2.1.0 - Critical File Disclosure

No description provided by source. Title: Seo Panel 2.1.0 - Critical File Disclosure Body: Seo Panel - Critical File Disclosure http://www.exploit-db.com/finding-0days-in-web-applications/ Versions Affected: 2.1.0 previous versions were not checked. Info: A complete open source seo control panel...

myPHPNuke 1.8.8 download.php dcategory Parameter XSS

No description provided by source...

WordPress File Groups plugin <= 1.1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress File Groups plugin = 1.1.2 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/file-groups.1.1.2.zip Version: 1.1.2 tested --- P...

ChangshinSoft EZTrans Server Download.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8155/info It has been reported that a problem in ChangshinSoft ezTrans Server exists in the download.php script that may allow an attacker to view arbitrary files. This may result in the disclosure of potentially sensitiv...

Siteframe 2.2.4 Download.php Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7143/info Siteframe has been reported vulnerable to an information disclosure vulnerability. When handling certain download requests Siteframe may be lead into an error condition. When these errors occur, the script will...

FdScript <= 1.3.2 (download.php) Remote File Disclosure Vulnerability

No description provided by source. Title : FdScript = v1.3.2 Remote File Disclosure Vulnerability Author : ajann Contact : : Site : http://stud.usv.ro/vladl/ $$ : Free SOURCE--------------------------------------------------------- http://target/path//download.php?fname=SOURCE FILE Example:...

UBBCentral UBB.threads 5.5.1/6.x download.php Number Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker...

WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability

No description provided by source...

com_forum Mambo Component <= 1.2.4RC3 Remote Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6873/phpbbcomponent1.2.4RC3.zip bug found in file : download.php define'INPHPBB', true; //$phpbbrootpa...