Lucene search
+L

105 matches found

NVD
NVD
•added 2016/10/06 2:59 p.m.•27 views

CVE-2015-1000004

XSS in filedownload v1.4 wordpress plugin...

6.1CVSS6AI score0.01371EPSS
SaveExploits1References2
NVD
NVD
•added 2016/10/06 2:59 p.m.•31 views

CVE-2015-1000003

Blind SQL Injection in filedownload v1.4 wordpress plugin...

9.8CVSS9.9AI score0.02646EPSS
SaveExploits1References2
Prion
Prion
•added 2016/10/06 2:59 p.m.•21 views

Cross site scripting

XSS in filedownload v1.4 wordpress plugin...

4.3CVSS6.2AI score0.01371EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2016/10/06 2:59 p.m.•23 views

Open redirect

Open Proxy in filedownload v1.4 wordpress plugin...

5.8CVSS7.1AI score0.01832EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2016/10/06 2:00 p.m.•43 views

CVE-2015-1000002

Open Proxy in filedownload v1.4 wordpress plugin...

8.2AI score0.01832EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2016/10/06 2:00 p.m.•41 views

CVE-2015-1000004

XSS in filedownload v1.4 wordpress plugin...

6AI score0.01371EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2016/10/06 2:00 p.m.•39 views

CVE-2015-1000003

Blind SQL Injection in filedownload v1.4 wordpress plugin...

10AI score0.02646EPSS
SaveExploits1References2
CVE
CVE
•added 2016/10/06 2:00 p.m.•66 views

CVE-2015-1000002

The CVE-2015-1000002 entry concerns the WordPress FileDownload plugin (version 1.4). Connected sources indicate multiple issues tied to FileDownload

8.2CVSS8.1AI score0.01832EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2016/10/06 2:00 p.m.•60 views

CVE-2015-1000004

CVE-2015-1000004 records an XSS vulnerability in the WordPress plugin “filedownload” v1.4. The connected documents substantiate the affected product (WordPress filedownload plugin) and the vulnerability class (XSS) but do not provide concrete technical specifics such as vulnerable files, root cau...

6.1CVSS5.9AI score0.01371EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2016/10/06 2:00 p.m.•71 views

CVE-2015-1000003

CVE-2015-1000003 describes a Blind SQL Injection in the WordPress plugin filedownload v1.4 . Multiple connected sources confirm that the vulnerability exists in this plugin version and is of the SQL injection type, impacting WordPress environments hosting this plugin. The NVD entry provides a hig...

9.8CVSS9.8AI score0.02646EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2016/10/06 12:00 a.m.•5 views

PT-2016-3570

Name of the Vulnerable Software and Affected Versions filedownload wordpress plugin version 1.4 Description The issue is related to an Open Proxy in the filedownload wordpress plugin. Recommendations For filedownload wordpress plugin version 1.4, update to a newer version that contains a fix for...

8.2CVSS0.01832EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/06 12:00 a.m.•8 views

CVE-2015-1000002: Improper Input Validation

Open Proxy in filedownload v1.4 wordpress plugin...

8.2CVSS5.8AI score0.01832EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2016/10/06 12:00 a.m.•5 views

PT-2016-3571

Name of the Vulnerable Software and Affected Versions filedownload version 1.4 Description The issue is related to a Blind SQL Injection in the filedownload WordPress plugin. Recommendations For version 1.4, update to a newer version that contains a fix for this issue, if available. At the moment...

9.8CVSS0.02646EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/06 12:00 a.m.•5 views

CVE-2015-1000003: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL Injection in filedownload v1.4 wordpress plugin...

9.8CVSS5.8AI score0.02646EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/06 12:00 a.m.•10 views

CVE-2015-1000004: Improper Neutralization of Input During Web Page Generation

XSS in filedownload v1.4 wordpress plugin...

6.1CVSS5.7AI score0.01371EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2016/10/06 12:00 a.m.•4 views

PT-2016-3572

Name of the Vulnerable Software and Affected Versions filedownload wordpress plugin version 1.4 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For filedownload wordpress plugin version 1.4, update to a newer version that contains a fix for this issue...

6.1CVSS0.01371EPSS
SaveExploits1References4
seebug.org
seebug.org
•added 2016/06/15 12:00 a.m.•29 views

WordPress Filedownload Plugin 0.1 arbitrary File Download

No description provided by source...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2015/10/05 12:00 a.m.•70 views

ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal

ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use...

SaveExploits0
Packet Storm
Packet Storm
•added 2015/08/05 12:00 a.m.•48 views

WordPress Filedownload 1.4 Open Proxy

Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified: 2015-07-11 Vendor Contact: [email protected] Description: Creates a downloadlink with t...

7.4AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2015/07/11 12:00 a.m.•24 views

FileDownload <= 1.4 - Multiple Issues

XSS, Blind SQL Injection and Open Proxy issues...

7.5CVSS2.1AI score0.02646EPSS
SaveExploits3References1Affected Software1
Rows per page
Query Builder