Mail.ru: [otus.p.mail.ru] Full Path Disclosure

Не факт, что вам удастся это исправить, так как проблема в стороннем ПО - "brat rapid annotation tool" Который доступен по ссылке otus.p.mail.ru/brat Стоит немного погулять по директориям и увидим раскрытие путей: Could not write statistics cache file to directory...

Mail.ru: [allods.my.com] Full Path Disclosure

Возникает из-за передачи переменной username как массива. allods.my.com/forum/wcf/acp/index.php?form=Login POST packageID=1&password=1&s=1&url=&username=1 error message: PHP warning in file /opt/WWWRoot/allods.com/wwwroot/forum/wcf/lib/util/StringUtil.class.php 118: trim expects parameter 1 to be...

WordPress Meta Slider Plugin <= 2.1.6 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

Subrion 3.x.x File Download / Arbitrary Access

Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...

Subrion 3.X.X - Multiple Vulnerabilities

Exploit for php platform in category web applications - Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X...

Subrion 3.x - Multiple Vulnerabilities

Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...

WordPress WP Photo Album Plus Plugin <= 4.9.0 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

WordPress Multilingual CMS Plugin <= 3.1.7.1 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress Super Refer A Friend Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

JM Twitter Cards <= 6.1 - Full Path Disclosure (FPD)

The JM Twitter Cards WordPress plugin was affected by a Full Path Disclosure FPD security vulnerability...

WordPress JM Twitter Cards Plugin <= 6.1 - Full Path Disclosure

Because of this vulnerability, attackers can discover the full path to the WordPress installation on the server, which they could use to assist in other attacks. Solution Update this plugin...

WordPress JM Twitter Cards Plugin <= 6.1 - Full Path Disclosure

Because of this vulnerability, attackers can discover the full path to the WordPress installation on the server, which they could use to assist in other attacks. Solution Update this plugin...

Wordpress AlertWire 1.1.1 Plugin - Full Path Disclosure Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin AlertWire 1.1.1 - Full Path Disclosure Vulnerability Date : 17/12/2014 Author : ZwX Download Link : https://wordpress.org/plugins/alertwire/ Vendor : http://www.alertwire.com/ Tested : Windows 7...

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...

ownCloud: Full Path Disclosure

When I was trying to upload a html file as profile picture as a non admin user. then it popped up with a message containing full path . Like that "Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/12/files/opt/lampp/htdocs/owncloud/data/12/cache/avatarupload"." Thanks...

ownCloud: Full Path Disclosure

When I was trying to load a file which is not actually exist then it shows "message":"Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/admin/files/lol"." Request GET /owncloud/index.php/apps/filestexteditor/ajax/loadfile?filename=lol HTTP/1.1 Host: 192.168.0.105...

MP3-jPlayer <= 2.4.2 - Full Path Disclosure

The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...

WordPress MP3 jPlayer Plugin <= 2.3.3 - Full Path Disclosure

Because of this vulnerability, attackers can disclose path information on wordpress sites. Solution Update the plugin...

MP3-jPlayer <= 2.4.2 - Full Path Disclosure

The download.php code allows arbitrary users to disclose path information on WordPress sites with this plugin installed. 120 $info = " 121 Get: " . $mp3 . " 122 Sent: " . $sent . " 123 File: " . $file . " 124 Open: " . $SERVER'DOCUMENTROOT' . $fp . " 125 Root: " . $rooturl . " 126 pID: "...