45 matches found
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download
WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org...
WordPress Memphis Document Library 3.1.5 Plugin - Arbitrary File Download
Exploit for php platform in category web applications Exploit Title: Arbitrary file download in Memphis Document Library 3.1.5 Google Dork: inurl:"mdocs-posts" -site:wordpress.org Date: 22/03/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: https://wordpress.org Software Link:...
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
The function "mdocsimgpreview" is in charge of downloading image previews previously uploaded by the administrator, but it does not sanitize the file path being downloaded, thus, allowing to download arbitrary files in the file system. The vulnerable GET parameter is "mdocs-img-preview". The...