WordPress Plugin Ripe HD FLV Player - SQL Injection

------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-16 E-mail = [email protected]...

Adobe Flash Player 11.5.502.135 - Crash (PoC)

Adobe Flash Player 11.5.502.135 - Crash PoC Title : Adobe Flash Player 11,5,502,135 memory corruption Version : 11,5,502,135 Date : 2012-12-17 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Internet Explorer 8 Windows 7 Author :...

Adobe Flash Player 11.5.502.135 - Crash (PoC)

Title : Adobe Flash Player 11,5,502,135 memory corruption Version : 11,5,502,135 Date : 2012-12-17 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Internet Explorer 8 Windows 7 Author : coolkaveh Bug : The vulnerability cause a Memo...

Adobe Flash Player 11,5,502,135 memory corruption

The vulnerability cause a Memory corruption via a specially crafted Flv files. Successful exploits can allow attackers to execute arbitrary code Title : Adobe Flash Player 11,5,502,135 memory corruption Version : 11,5,502,135 Date : 2012-12-17 Vendor : http://www.adobe.com/ Impact : High Contact ...

WordPress FLV Player Plugin 1.1 - SQL Injection

This WordPress FLV Player plugin's "id" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin FLV Player - id SQL Injection

WordPress Plugin FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/56418/info The FLV Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit...

WordPress Hitasoft FLV Player 1.1 SQL Injection

Exploit Title: Wordpress Hitasoft FLV Player 1.1 SQL Injection Vulnerability Google Dork: inurl:"hitasoftplayer/config.php?id=" Exploit Author: Ashiyane Digital Security Team Software Link: http://hitasoft.com/hitasoftplayer.zip Category: Web Application Version: 1.1 Tested on: Windows 7 Location...

WordPress Plugin FLV Player - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56418/info The FLV Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application, acce...

CVE-2010-5263

Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file. NOTE: some of these details are obtained from third part...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

CVE-2011-4286 affects Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2, where the media-filter implementation (filter/mediaplugin/filter.php) is vulnerable to multiple cross-site scripting (XSS) via (1) Flash Video files and (2) YouTube videos. The root cause is improper handling of input in the...

WordPress Plugin HD FLV Player - uploadVideo.php Arbitrary File Upload

WordPress Plugin HD FLV Player - uploadVideo.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53967/info HD FLV Player plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately...

WordPress Plugin HD FLV Player - 'uploadVideo.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53967/info HD FLV Player plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to...

WordPress HD FLV Player 1.7 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Plugins - WordPress HD FLV Player Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

VLC Media Player 1.1.11 Denial Of Service

Application : VLC media player = 1.1.11 .flv Denial of Service Date : 12/03/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPirates Greetz : i greet to Gjoko 'LiquidWorm' Krstic, Matias Chroren ... ,and my friends in anywhere and also every Morocca...

VulnCheck KEV: CVE-2007-6144

Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll1work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information...

FLV Player flash application multiple security vulnerabilities

Content spoofing, crossite scripting...

Уязвимости в FLV Player

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Content Spoofing и Cross-Site Scripting уязвимостях в флеш видео плеере FLV Player. Content Spoofing WASC-12: Флешки плеера FLV Player принимают произвольные адреса в параметре configxml, что позволяет подделать содержимое флешки - например, указа...