302 matches found
CVE-2017-5493
wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted 1 site signup or 2 user signup...
WordPress functions.php theme file Backdoor vulnerability
No description provided by source...
CVE-2015-4454
SQL injection vulnerability in the gethashgraphtemplate function in lib/functions.php in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via the graphtemplateid parameter to graphtemplates.php...
Easy2Map Photos <= 1.0.9 - SQL Injection
The code in Functions.php is vulnerable to SQL Injection because they are not parameterising or sanitising user input. PoC sqlmap -u 'http://www.example.com/wp-admin/admin-ajax.php' --data="mapID=11='+or+1%3D%3D1%3B=e2mimgsavemapname" --cookie=COOKIEHERE --level=5 --risk=3...
MyBB 1.6.x < 1.6.11 Multiple Vulnerabilities
Binary data 8613.prm...
Empirebak /class/functions.php 代码执行漏洞
No description provided by source...
Sql injection
Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...
Status2k-Server-Monitoring /includes/functions.php 后门
No description provided by source...
Delightful Downloads 1.3.1.1 - includes/functions.php User-Agent HTTP Header Stored XSS
The Delightful Downloads WordPress plugin was affected by an includes/functions.php User-Agent HTTP Header Stored XSS security vulnerability...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
No description provided by source. Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
Omegaboard <= 1.0beta4 (functions.php) Remote File Include Vuln
No description provided by source. ----------------------------------------------- Omegaboard v1.0b4 phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce...
Kayako eSupport (functions.php) 3.70.02 - SQL Injection Vulnerability
No description provided by source. Peace !! Name : Kayako eSupport v3.70.02 SQL Injection Vulnerability Date : july 18,2010 Vendor urL : http://www.kayako.com/solutions/esupport/ Dork :Find It !! Author : ScOrPiOn Greetz : Dr.Dmar & Joker1 & HiDDen HaCkEr & GeNeRaL KbKb & And All My Friends Effec...
Monster Top List 1.4 Functions.PHP Remote File Include Vulnerability
No description provided by source...
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection
No description provided by source. $Id: phpldapadminqueryengine.rb 14060 2011-10-25 05:25:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
WordPress <= 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution
No description provided by source. ============================================= - Release date: November 11th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.5 Unrestricted...
Invision Board 1.1.1 functions.php SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7290/info An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. This vulnerability exists in the functions.php script file. An attacker may be able to exploit...
phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability
No description provided by source. ----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...
VietPHP _functions.php dirpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level :...
CVE-2012-1600
Multiple cross-site scripting XSS vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 type of a function...