WordPress Localize My Post 1.0 - Local File Inclusion Detection

WordPress Localize My Post 1.0 is susceptible to local file inclusion via the ajax/include.php file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Localize My Post 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

CVE-2026-50743: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability exists in the zone-include.php script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones could be triggered via crafted GET or POST requests without any verification of the CSRF token, allowing an attacker to perform these actions on behalf of an...

CVE-2026-50740

Affected software/issue: Revive Adserver

CVE-2026-50740: Improper Neutralization of Input During Web Page Generation

A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could exploit the refresh parameter of the iFrame invocation tag to perform reflected XSS attacks...

CVE-2026-34915: Improper Neutralization of Input During Web Page Generation

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the...

CVE-2026-34912: Improper Access Control

A missing access control check when linking banners or campaigns to a zone through the zone-include.php script of Revive Adserver 6.0.6 and earlier, or via its API allows a low‑privileged user could link their zones to banners or campaigns owned by other managers on the same instance, resulting i...

CVE-2026-34914: Improper Neutralization of Special Elements used in an SQL Command

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. A low‑privileged user could exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the script a...

PT-2026-51553

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the...

EUVD-2009-1846

Malware in sbrugna...

Cross-site Scripting (XSS)

ptrofimov/beanstalkconsole is vulnerable to cross-site scripting. The vulnerability exists in include.php due to improper sanitizing of user inputs which allows an attacker to insert and execute arbitrary Javascript...

PT-2021-10884

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.6.0 Valyria Description The issue is related to incorrect access control in Z-BlogPHP. It is possible to bypass authentication using PHP loose comparison and a magic hash. The passwordvisit input password function in zb...

CVE-2018-16299

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

CVE-2018-16299

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

CVE-2018-16299

CVE-2018-16299 : WordPress Localize My Post 1.0 is vulnerable to Local File Inclusion via the ajax/include.php parameter. The vulnerability stems from insufficient validation of the file parameter, enabling an attacker to read arbitrary server files. Affected: WordPress Localize My Post 1.0 plugi...

CVE-2018-16299: Improper Limitation of a Pathname to a Restricted Directory

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...

PT-2018-13475

Name of the Vulnerable Software and Affected Versions Localize My Post plugin version 1.0 Description The issue allows Directory Traversal via the ajax/include.php file parameter. Recommendations For Localize My Post plugin version 1.0, consider restricting access to the ajax/include.php file to...

PT-2017-16810

Name of the Vulnerable Software and Affected Versions PhreeBooksERP versions prior to 2017-02-13 Description The issue exists due to insufficient filtration of user-supplied data in the form HTTP GET parameter passed to the "PhreeBooksERP-master/extensions/ShippingMethods/ups/label mgr/js...

PT-2015-5039

Name of the Vulnerable Software and Affected Versions PHPKIT version 1.6.6 Build 160014 Description A cross-site scripting XSS issue exists in the poll archive of PHPKIT, allowing remote attackers to inject arbitrary web script or HTML via the result parameter to "upload files/pk/include.php"...

CVE-2015-1052: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the poll archive in PHPKIT 1.6.6 Build 160014 allows remote attackers to inject arbitrary web script or HTML via the result parameter to uploadfiles/pk/include.php...

PHPKIT WCMS 'include.php' cross-site scripting vulnerability

PHPKIT WCMS is a web-based content management system CMS. The system provides modules such as forums and message boards. A cross-site scripting vulnerability exists in PHPKIT WCMS, which stems from the program failing to adequately filter user-submitted input. When a user browses the affected sit...