PT-2012-1845

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.3 Moodle versions 2.1.x through 2.1.0 Description The issue allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity, due to improper restriction of comment...

CVE-2012-1037

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

CVE-2012-1037: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

PT-2012-3035

Name of the Vulnerable Software and Affected Versions GLPI versions 0.78 through 0.80.61 Description The issue allows remote authenticated users to execute arbitrary PHP code via a URL in the sub type parameter in the front/popup.php file. Recommendations For GLPI versions 0.78 through 0.80.61,...

Front End Editor < 2.3 - Arbitrary File Upload

The Front-end Editor WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress Front End Editor Plugin <= 2.2 - Arbitrary File Upload

Because of this vulnerability, an attacker can upload arbitrary files to the upload folder. Solution Update this plugin...

Wordpress Plugins - Front-end Editor Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Front File Manager 0.1 File Upload

File upload vulnerability in WordPress Front File Manager plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

EasyTalk X2.0.2 前台任意文件删除漏洞

简要描述： EasyTalk处理用户上传头像的代码有问题，若判断用户上传的头像不合法，则根据参数$POST'imgpath'的路径删除用户上传的非法头像文件。漏洞出在EasyTalk对$POST'imgpath'处理不当上，没有对用户提交的参数进行判断就直接删除imgpath指向的文件。 详细说明： 在SettingAction.class.php 101行的函数doface2中： public function doface2 $ysw=$POST 'ysw'; if $ysw460 $zoom=intval$ysw/460; else $zoom=1; $x=$POST...

WordPress Front End Upload 0.5.3 Shell Upload

Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-end-upload/ Date: 31/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://mondaybynoon.com/20120102/announcing-front-end-upload-wordpress-plugin/ Software Link:...

Wordpress Front End Upload 0.5.3 Arbitrary File Upload

No description provided by source. Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-end-upload/ Date: 31/05/2012 Exploit Author: Adrien Thierry Vendor Homepage:...

WordPress Plugin Front File Manager 0.1 - Arbitrary File Upload

Exploit Title: Wordpress front file manager 0.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-file-manager/ Date: 07/06/2012 Exploit Author: Adrien Thierry adrien dot thierryfr at gmail dot com Vendor Homepage: http://www.webikon.sk/en Software Link:...

WordPress Front End Upload 0.5.3 - Arbitrary File Upload

Front End Upload plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible...

Wordpress Front End Upload 0.5.3 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Front End Upload Shell Upload Vulnerability Version : 0.5.3 Link : http://wordpress.org/extend/plugins/front-end-upload/ Plugins : http://downloads.wordpress.org/plugin/front-end-upload.0.5.3.zip Google Dork :...

WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload

WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-end-upload/ Date: 31/05/2012 Exploit Author: Adrien Thierry Vendor Homepage:...

WordPress Plugin Front End Upload 0.5.3 - Arbitrary File Upload

Exploit Title: Wordpress front-end-upload 0.5.3 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-end-upload/ Date: 31/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://mondaybynoon.com/20120102/announcing-front-end-upload-wordpress-plugin/ Software Link:...

ZyXel GS1510 Cross Site Scripting

Advisory Information Title: Multiple vulnerabilities in ZyXel GS1510 web front end Date published: 2012-03-14 12:57:15 AM upSploit Ref: UPS-2011-0042 Advisory Summary IT Security Geeks have discovered multiple vulnerabilities in the ZyXel 1510 24-port Ethernet switch, these include Admin password...

Information disclosure vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

It has been discovered that the extension "Front End User Registration" srfeuserregister is vulnerable to information disclosure Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.1 and below Vulnerability Type:...

Pulse Pro CMS 1.7.2 Cross Site Scripting

Exploit Title: Pulse Pro CMS v.1.7.2 - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://pulsecms.com Date: 13-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista FF Cross-Site Scripting XSS on Front Site POC:...

Fork CMS 3.1.5 Cross Site Scripting

Exploit Title: Fork CMS v.3.1.5 - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://www.fork-cms.com/ Date: 13-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 Cross-Site Scripting XSS on Front Site POC:...