Lucene search
+L

10 matches found

UbuntuCve
UbuntuCve
•added 2016/05/22 1:59 a.m.•37 views

CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

8.6CVSS7.2AI score0.07872EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2015/01/05 12:00 a.m.•61 views

FreeBSD : wordpress -- multiple vulnerabilities (5e135178-8aeb-11e4-801f-0022156e8794)

MITRE reports : wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message. wp-includes/http.php in WordPress before 3.7.5,...

6.8CVSS6.3AI score0.82702EPSS
SaveExploits9References8
Mend
Mend
•added 2014/11/25 11:00 p.m.•5 views

CVE-2014-9038

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery SSRF attacks by referring to a 127.0.0.0/8 resource...

6.9CVSS0.03772EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2014/11/25 11:00 p.m.•38 views

CVE-2014-9038

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery SSRF attacks by referring to a 127.0.0.0/8 resource...

6.4CVSS5.7AI score0.03772EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/25 12:00 a.m.•5 views

CVE-2014-9038: Improper Input Validation

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery SSRF attacks by referring to a 127.0.0.0/8 resource...

6.4CVSS5.8AI score0.03772EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/11/25 12:00 a.m.•3 views

PT-2014-8808

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.7.5 WordPress versions 3.8.x prior to 3.8.5 WordPress versions 3.9.x prior to 3.9.3 WordPress versions 4.x prior to 4.0.1 Description The issue allows remote attackers to conduct server-side request forgery SSRF...

6.4CVSS0.03772EPSS
SaveExploits0References15
Patchstack
Patchstack
•added 2014/11/20 12:00 a.m.•29 views

WordPress <= 4.0.0 - SSRF

wp-includes/http.php in WordPress allows the attackers to conduct server-side request forgery attacks by referring to a 127.0.0.0/8 resource. Solution Update WordPress...

6.4CVSS4.9AI score0.03772EPSS
SaveExploits0References1Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

phpMyProfiler <= 0.9.6 - Remote File Include Vulnerability

No description provided by source. Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/10/05 12:00 a.m.•73 views

phpMyProfiler Remote File Inclusion Vulnerability

Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...

1.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/10/04 12:00 a.m.•43 views

phpMyProfiler remote file include

Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...

1.1AI score
SaveExploits0
Rows per page
Query Builder