Code Execution and FPD vulnerabilities in Simple:Press Forum for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin Simple:Press Forum for WordPress. These are Code Execution and Full path disclosure vulnerabilities. Code Execution WASC-31: Execution of arbitrary code is possible via TinyBrowser. As I already told concerning...

Burning Board 3.1.5 Path Disclosure

--------------------------------------------------------------------- Exploit Title : Burning Board 3.1.5 Full Path Disclosure --------------------------------------------------------------------- Author : linc0ln.dll Date : 19/06/11 Site : http://linc0ln.pl/ @ : linc0lnate-o-u.org...

Burning Board 3.1.5 - Full Path Disclosure

Burning Board 3.1.5 - Full Path Disclosure --------------------------------------------------------------------- Exploit Title : Burning Board 3.1.5 Full Path Disclosure --------------------------------------------------------------------- Author : linc0ln.dll Date : 19/06/11 Site :...

IL и XSS уязвимости во многих темах для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Cross-Site Scripting уязвимостях во многих темах для WordPress. В разных шаблонах имеется test.php - скрипт с phpinfo - что приводит к Information Leakage утечка FPD и другой важной информации о сервере и XSS в PHP 4.4.1,...

WordPress Plugin SermonBrowser 0.43 - SQL Injection

WordPress Plugin SermonBrowser 0.43 - SQL Injection alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$stri...

WordPress Plugin SermonBrowser 0.43 - SQL Injection

alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$string ; for $i = 0; $i $y...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net |...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting / Full Path

Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net | http://www.phpmyadmin.net/homepage/downloads.php Version: 2.6.3-pl1 Tested on: PHP Cross...

SmodCMS v.4.07 (LFI/FPD) Multiple Vulnerability

Exploit for php platform in category web applications =============================================== SmodCMS v.4.07 LFI/FPD Multiple Vulnerability =============================================== Exploit Title: SmodCMS v.4.07 LFI/FPD Multiple Vulnerability Software SmodCMS v.4.07 Date: 2010-04-24...

Callisto <= 1.1.5 pl5 (FPD/XSS/XSRF) Multiple Vulnerability

Exploit for php platform in category web applications =========================================================== Callisto = 1.1.5 pl5 FPD/XSS/XSRF Multiple Vulnerability =========================================================== Exploit Title: Callisto = 1.1.5 pl5 FPD/XSS/XSRF Multiple...

MyBB 1.4.12 <= Full Path Disclosure

Exploit for php platform in category web applications =================================== MyBB 1.4.12 = Full Path Disclosure =================================== Exploit Title: MyBB 1.4.12 = Full Path Disclosure Software MyBB 1.4.X Date: 2010-04-19 Author: GLOBUS Software Link: http://mybboard.net...

PHP-Fusion v7.00.07 Core PL Full Path Disclosure

Exploit for php platform in category web applications ================================================ PHP-Fusion v7.00.07 Core PL Full Path Disclosure ================================================ Exploit Title: PHP-Fusion v7.00.07 Core PL Full Path Disclosure Software PHP-Fusion v7.00.07 Cor...

Roundcube Webmail - Multiple Vulnerabilities

Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl Software Link: Software link : http://roundcube.net/download Version: 0.2.X , | possible voulerability in higher versions. Tested on: Code : XSS:...

Roundcube Webmail - Multiple Vulnerabilities

Roundcube Webmail - Multiple Vulnerabilities Exploit Title: RoundCube Webmail XSS Voulerability Date: 6.01.2010 Author: j4ck & Globus from elitehackers.pl Software Link: Software link : http://roundcube.net/download Version: 0.2.X , | possible voulerability in higher versions. Tested on: Code :...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...