Wordpress Gallery插件'load'参数远程文件包含漏洞

Bugtraq ID:57650 CVE ID: CVE-2012-4919 WordPress Gallery是一款用于Wordpress的图库插件。 通过"load"参数提交给wp-content/plugins/wordpress-gallery/functions/updateorder.ph的输入在用于包含文件之前缺少校验，允许攻击者利用漏洞包含远程文件，并以WEB权限执行任意代码。 0 WordPress Gallery Plugin 1.x 厂商解决方案 目前没有详细解决方案提供：...

Wordpress plugin wp-royal-gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla! Ignite Gallery Component SQLi Vulnerabilities

Joomla! with Ignite Gallery component is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Invision Gallery SQL Injection Vulnerability

Exploit for php platform in category web applications location: site/index.php?automodule=gallery&cmd=si&img=SQL or site/act=module&module=gallery&cmd=si&img=SQL 0day.today 2018-04-14...

Invision Gallery 2.0.5 SQL Injection

Exploit Title : Invision Gallery SQL Injection Exploit Author : Ashiyane Digital Security Team software Homepage: www.invisionpower.com/apps/gallery/ Home : ww.Ashiyane.org Security Risk : High - SQL Injection version : 2.0.5 Dork : Invision Gallery 2.0.5 © 2013 IPS, Inc. inurl:img= or Invision...

Invision Gallery 2.0.5 - SQL Injection

Invision Gallery 2.0.5 - SQL Injection Exploit Title : Invision Gallery SQL Injection Exploit Author : Ashiyane Digital Security Team software Homepage: www.invisionpower.com/apps/gallery/ Home : ww.Ashiyane.org Security Risk : High - SQL Injection version : 2.0.5 Dork : Invision Gallery 2.0.5 ©...

Invision Gallery 2.0.5 - SQL Injection

Exploit Title : Invision Gallery SQL Injection Exploit Author : Ashiyane Digital Security Team software Homepage: www.invisionpower.com/apps/gallery/ Home : ww.Ashiyane.org Security Risk : High - SQL Injection version : 2.0.5 Dork : Invision Gallery 2.0.5 © 2013 IPS, Inc. inurl:img= or Invision...

WordPress Mac Photo Gallery 2.8 File Disclosure

File disclosure vulnerability in WordPress Mac Photo Gallery plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

WordPress Plugin Gallery - filename_1 Arbitrary File Access

WordPress Plugin Gallery - filename1 Arbitrary File Access source: https://www.securityfocus.com/bid/57256/info The Gallery plugin for WordPress is prone to an arbitrary file-access vulnerability. Remote attackers can exploit this issue to read arbitrary files. This may lead to further attacks...

WordPress Gallery Plugin - Remote Arbitrary File Access

WordPress Gallery plugin is prone to a remote arbitrary file access vulnerability that allows an attacker to read arbitrary files. Other attacks are also possible. Solution Update the plugin...

WordPress Plugin Gallery - 'filename_1' Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info The Gallery plugin for WordPress is prone to an arbitrary file-access vulnerability. Remote attackers can exploit this issue to read arbitrary files. This may lead to further attacks. Gallery 3.8.3 is vulnerable; other versions may also be...

WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress NextGEN Gallery Plugin - Cross Site Scripting

WordPress NextGEN Gallery plugin's "test-head" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Joomla Ignite Gallery 0.8.3.1 SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - Ignite Gallery 0.8.3.1 - S...

WordPress ReFlex Gallery 1.3 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Invision Power Services Invision Gallery 1.0.1 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications source: http://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient...

Wordpress Reflex Gallery Upload Vulnerability

This module exploits an arbitrary PHP code upload in the WordPress Reflex Gallery version 3.1.3. The vulnerability allows for arbitrary file upload and remote code execution. Module Options msf use exploit/unix/webapp/wp/reflexgalleryfileupload msf undefinedreflexgalleryfileupload show actions...

CVE-2012-3873

Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 data/gallery/edit.php, 2 data/guestbook/edit.php, 3 data/file/edit.php, 4 data/htmltext/edit.php, 5 data/publication/edit.php, or 6...