Wordpress Mailing List Plugin 1.3.2 - Remote File Inclusion

No description provided by source. Exploit Title: Mailing List Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mailz Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/mailz/download/ Version: 1.3.2...

WordPress邮件列表插件任意文件下载漏洞

WordPress Mailing List Plugin是一款WordPress的邮件列表插件 通过"wph", "wpdb", "wpu"和"wpp"参数传递给wp-content/plugins/mailz/lists/dl.php的输入在用于创建数据库连接之前wp-content/plugins/mailz/lists/config/config.php脚本没有对其进行充分校验，攻击者可通过目录遍历序列攻击获得本地资源任意文件 0 WordPress Mailing List Plugin 1.x 厂商解决方案 WordPress Mailing List Plugin...

WordPress Mailing List Plugin 'wpabspath' Parameter Remote File Include Vulnerability

The Mailing List plug-in for WordPress is prone to a remote file- include vulnerability because it fails to sufficiently sanitize user- supplied input. Exploiting this issue could allow an attacker to compromise the application and the underlying system. Other attacks are also possible. Mailing...