1886 matches found
Atmail Webmail 7.2 - Multiple Vulnerabilities
Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber Request:...
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
vithy - Full Path Disclosure
The vithy WordPress theme was affected by a Full Path Disclosure security vulnerability...
Shotzz - Full Path Disclosure
The shotzz WordPress theme was affected by a Full Path Disclosure security vulnerability...
moneymasters - Full Path Disclosure
The moneymasters WordPress theme was affected by a Full Path Disclosure security vulnerability...
yvora - Full Path Disclosure
The yvora WordPress theme was affected by a Full Path Disclosure security vulnerability...
appius - Full Path Disclosure
The appius WordPress theme was affected by a Full Path Disclosure security vulnerability...
onepagewebsite - Full Path Disclosure
The onepagewebsite WordPress theme was affected by a Full Path Disclosure security vulnerability...
Activity Log - Full Path Disclosure
The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...
Meta Slider 2.1.6 - Multiple Full Path Disclosure
The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...
WP Photo Album Plus - Full Path Disclosure
The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...
super-refer-a-friend - Full Path Disclosure
The Super Refer A Friend WordPress plugin was affected by a Full Path Disclosure security vulnerability...
grou-r&om-image-widget - Full Path Disclosure
The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...
FuckShitUp - Multi Vulnerabilities Scanner written in PHP
Basically, FSU is bunch of tools written in PHP-CLI. Using build-in functions, you are able to grab url's using search engines - and so, dork for interesting files and full path disclosures. Using list of url's, scanner will look for Cross Site Scripting, Remote File Inclusion, SQL Injection and...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...
WordPress Studio Zen Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Feather12 Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...