8 matches found
WordPress estrutura-basica theme path traversal vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. estrutura-basica theme is a website theme plugin used in it. A path traversal vulnerability exists in WordPress estrutura-basica theme...
CVE-2015-9473
The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter...
CVE-2015-9473
CVE-2015-9473 concerns the WordPress estrutura-basica theme (up to 2015-09-13) with a directory traversal flaw in the scripts/download.php arquivo parameter. The root cause is improper handling of file paths, enabling retrieval of local files via this parameter. Public references in the provided ...
Sql injection
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
CVE-2015-6962
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
CVE-2015-6962
SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php...
WordPress Estrutura-Basica theme 'download.php' arbitrary file download vulnerability
WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Estrutura-Basica is one of the basic structure themes. An arbitrary file download vulnerability exists in the WordPres...
Estrutura-Basica - Local File Download
The estrutura-basica WordPress theme was affected by a Local File Download security vulnerability...