1610 matches found
CVE-2014-4937: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in includes/bookxexport.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
PT-2014-5977
Name of the Vulnerable Software and Affected Versions ToolPage plugin versions 1.6.1 and earlier for WordPress Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the t parameter in the includes/getTipo.php file. This could potentially...
CVE-2014-4560: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter...
Power BB 1.8.3 - Remote File Includes
No description provided by source. Dada?lar Grup Komutanl??? | HackSpy | Zombie | KroNickq | DigitALL | NoFearx38 | 1923Turk Grup by DigitALL Sites : http://powerwd.net Download : http://www.phpexplorer.com/Goster/536 Download : http://sourceforge.net/projects/pbb/ Power BB 1.8.3 Remote File...
blogplus 1.0 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. --:local file include:-- --------------------------------- script:blog+ v1.0 ---------------------------------------------- download from:http://www.ziddu.com/download/3151643/blogplusv1.0final.zip.html ----------------------------------------------...
MakeBook 2.2 Form Field Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4996/info The MakeBook guestbook software does not sufficiently sanitize potentially dangerous characters from form field input. This may enable attackers to inject arbitrary HTML into form fields, which will be stored on...
Lanius CMS <= 0.5.2 - Remote Arbitrary File Upload Exploit
No description provided by source. ?php / -------------------------------------------------------- Lanius CMS = 0.5.2 Remote Arbitrary File Upload Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.laniuscms.org/...
PostNuke <= 0.763 (PNSV lang) Remote Code Execution Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
Imatix Xitami 2.5 Server Side Includes Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10778/info It is reported that Imatix Xitami is affected by a cross-site scripting vulnerability in the server side includes test script. This issue is due to a failure of the application to properly sanitize user-supplie...
Drake CMS < 0.2.3 ALPHA rev.916Remote File Inclusion Vulnerability
No description provided by source. Coding 4 Fun c4f.pl Drake CMS v0.2.2 ALPHA rev.846 http://drakecms.org ; Class = Remote File Inclusion ; Download = https://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420102 ; Found by = GregStar gregstaratc4fdotpl ;...
WHMCS 4.x & 5.x - Multiple Web Vulnerabilities
No description provided by source. Exploit Title: WHMCS v4.x & v5.x - Multiple Web Vulnerabilities Date: 2013-12-10 Exploit Author: ahwak2000 Vendor Homepage: http://whmcs.com/ Version: 4.x , 5.x Tested on: win 7 +------------------+ | Vulnerability | +------------------+ File :...
Signkorn Guestbook <= 1.3 (dir_path) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Signkorn Guestbook = v1.3 dirpath Remote File Inclusion Exploit =============================================================================================== Critica...
Gnat-TGP <= 1.2.20 Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class GnatTGPRemoteFileIncludePOCBase: vulID = '67834' version = '1' vulDate = '2010-03-03' author = ' '...
WordPress 2.1.1 wp-includes/theme.php iz Variable Arbitrary Command Execution
No description provided by source...
ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38126/info Huski CMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer;...
CitrusDB 0.3.6 Arbitrary Local PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This issue is reported...
Job Site 1.0 - Multiple Vulnerabilities
No description provided by source. Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
ZoneMinder Video Server packageControl Command Execution (CVE-2013-0232)
A code execution vulnerability has been reported in ZoneMinder. The vulnerability is due to flaw in the index.php script that is triggered when user supplied input used in the /includes/actions.php file is passed from the 'runeState' parameter to the 'packageControl, which calls exec with user...
PT-2014-2457
Name of the Vulnerable Software and Affected Versions WP ecommerce Shop Styling plugin for WordPress versions prior to 1.8 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter in the includes/generate-pdf.php file. Recommendations For...
CVE-2013-0724: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter...