PT-2026-115428

The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw file upload function. This is due to missing file extension validation on the attacker-supplied image path parameter, whose basename-derived file name bypasses the...

Unfixed XSS vulnerability at darkstar.me.uk

Security researcher C1c4Tr1Z, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting darkstar.me.uk, which at the time of submission ranked 8418439 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is...