7 matches found
CVE-2016-2222
The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...
FreeBSD : wordpress -- multiple vulnerabilities (5e135178-8aeb-11e4-801f-0022156e8794)
MITRE reports : wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message. wp-includes/http.php in WordPress before 3.7.5,...
CVE-2014-9038
wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery SSRF attacks by referring to a 127.0.0.0/8 resource...
WordPress <= 4.0.0 - SSRF
wp-includes/http.php in WordPress allows the attackers to conduct server-side request forgery attacks by referring to a 127.0.0.0/8 resource. Solution Update WordPress...
phpMyProfiler <= 0.9.6 - Remote File Include Vulnerability
No description provided by source. Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler Remote File Inclusion Vulnerability
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler remote file include
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...