1892 matches found
Sahifa 2.4.0 - Multiple Full Path Disclosure
The sahifa WordPress theme was affected by a Multiple Full Path Disclosure security vulnerability...
WordPress Photocrati Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress MoneyMasters Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Shotzz Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Caulk Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Advanced Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct request full path disclosure in dewplayer.php. Solution Update the plugin...
WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...
WordPress Dewplayer Plugin <= 1.2 - Full Path Disclosure
This plugin is prone to a direct rquest path disclosure weakness in dewplayer.php. Solution Update the plugin...
WordPress Feather12 Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...
WordPress Imperial Fairytale Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Appius Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Studio Zen Theme - Multiple Vulnerabilities
The attack vector requires separate vulnerability at target site to conduct CS and XSS attacks with using of jPlayer. Also, there are a full path disclosure vulnerability in this theme. Solution Update the theme...
WordPress Music Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress Starbox Voting Plugin - Full Path Disclosure
Because of this vulnerability, remote users can determine the full path to the web root directory and other potentially sensitive information. Solution Update the plugin...
WordPress Yvora Theme - Full Path Disclosure
Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...
WordPress DZS Video Gallery XSS / Path Disclosure / Command Execution
Hello list! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
Localize: PHP PDOException and Full Path Disclosure
hi phrasekey , agian! in phraseChange action if set to array pdo quote show error! line 755 index.php Warning: PDO::quote expects parameter 1 to be string, array given in /srv/data/web/vhosts/www.localize.im/htdocs/classes/Database.php on line 30 Fatal error: Uncaught exception 'PDOException' wit...
netclassifieds (sql/xss/full path) Multiple Vulnerabilities
No description provided by source. Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
Wordpress bbpress Plugin - Multiple Vulnerabilities
No description provided by source. Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec Website : www.dark-puzzle.com Youtube : http://www.youtube.com/user/mariotrey E-mail : [email protected] Greetings to all moroccan researchers a...
social web cms <= beta 2 - Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...