12 matches found
WordPress estrutura-basica theme path traversal vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. estrutura-basica theme is a website theme plugin used in it. A path traversal vulnerability exists in WordPress estrutura-basica theme...
CVE-2015-9473
The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...
CVE-2015-9473
CVE-2015-9473 concerns the WordPress estrutura-basica theme (up to 2015-09-13) with a directory traversal flaw in the scripts/download.php arquivo parameter. The root cause is improper handling of file paths, enabling retrieval of local files via this parameter. Public references in the provided ...
CVE-2015-9473: Improper Limitation of a Pathname to a Restricted Directory
The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...
PT-2019-7432
Name of the Vulnerable Software and Affected Versions estrutura-basica theme versions through 2015-09-13 Description The issue concerns directory traversal in the estrutura-basica theme for WordPress. This is achieved via the arquivo parameter in the "scripts/download.php" endpoint. Recommendatio...
CVE-2015-6962
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
Sql injection
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
CVE-2015-6962
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
CVE-2015-6962: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
PT-2015-7424
Name of the Vulnerable Software and Affected Versions Farol affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the email parameter to "tkmonitor/estrutura/login/Login.actions.php" API endpoint. Recommendations At the moment, there i...
WordPress Estrutura-Basica theme 'download.php' arbitrary file download vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Estrutura-Basica is one of the basic structure themes. An arbitrary file download vulnerability exists in the WordPres...
