WordPress is-human - passthru RCE (CVE-2011-10033)

Exploits CVE-2011-10033 by injecting PHP into the type parameter of is-human/engine.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress is-human plugin RCE CVE-2011-10033.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import Handl...

WordPress is-human - passthru RCE Detection (CVE-2011-10033)

Detects CVE-2011-10033 via is-human/engine.php type=ihoptions;passthruphpinfo;error. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-10033 via is-human/engine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress plugin is-human security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2011-10033: Improper Neutralization of Directives in Dynamically Evaluated Code

The WordPress plugin is-human = v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be triggered via the 'type' parameter when the 'action' parameter is set to 'log-reset'. The root cause is unsafe use of eval on user-controlled input, which can lead to execution of...

EUVD-2012-2899

Malware in sbrugna...

EUVD-2009-2225

Malware in sbrugna...

EUVD-2022-51632

Malicious code in bioql PyPI...

CVE-2022-4276

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...

Out-of-bounds

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...

CVE-2022-4276 House Rental System POST Request tenant-engine.php unrestricted upload

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...

CVE-2022-4276: Incorrect Privilege Assignment

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...

PT-2022-26550 · Unknown · House Rental System

Name of the Vulnerable Software and Affected Versions: House Rental System affected versions not specified Description: A critical issue was found in the House Rental System, affecting some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation...

CVE-2022-4276 House Rental System POST Request tenant-engine.php unrestricted upload

A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument idphoto leads to unrestricted upload. The attack may be launched...

megashopping.ro XSS vulnerability

Open Bug Bounty ID: OBB-654446 Description| Value ---|--- Affected Website:| megashopping.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2012-2925

The CVE-2012-2925 entry concerns a SQL injection in engine.php of Simple PHP Agenda 2.2.8, exploitable via the priority parameter in addTodo. The root cause is unsanitized/concatenated input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Affected software: Simpl...

CVE-2012-2918

Chevereto 1.91 is affected by CVE-2012-2918 due to a cross-site scripting (XSS) flaw in Upload/engine.php that allows injecting arbitrary web script or HTML via the v parameter. The vulnerability is tied to the engine.php handler in Chevereto 1.91; exploitation details are not provided in the ava...

CVE-2012-2919: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot in the v parameter...

CVE-2012-2918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2012-2925: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action...

PT-2012-4364

Name of the Vulnerable Software and Affected Versions Chevereto version 1.91 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the v parameter in the Upload/engine.php file. Recommendations For Chevereto...