WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure

Exploit for php platform in category web applications Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

Novell Sentinel Log Manager code execution

fileDownload and reportPluginUpload servlets allow privileged operations to be executed without authentication...

Vulnerabilities in FileDownload Snippet for MODx

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Directory Traversal и Full path disclosure уязвимостях в FileDownload Snippet для MODx. Directory Traversal: http://site/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=../index.php Данная уязвимость может использоваться для...

CVE-2007-0659

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

Design/Logic Flaw

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

CVE-2007-0659

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

CVE-2007-0659

CVE-2007-0659 affects the MuddyDogPaws FileDownload snippet for MODx, prior to version 2.5. The issue allows remote attackers to download arbitrary files, demonstrated by downloading config.inc.php to obtain database credentials. No explicit root cause or remediation details are provided in the c...