4361 matches found
WordPress Rokbox 2.13 XSS / DoS / File Upload / Path Disclosure
Hello list! I want to warn you about multiple security vulnerabilities in plugin Rokbox for WordPress. These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses...
Wordpress Plugins - wp superb Slideshow Full Path Disclosure
the attacker can use this bug for get Important information 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...
Cherokee web server v1.2.101 Full Path Disclosure
This bug is a remote 'Full Path Disclosure in Cherokee web server version 1.2.101 the attacker can use this bug for get Important information and Navigate between files/folders of server and get the content. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...
WordPress RokBox Multiple Vulnerabilities
These are Cross-Site Scripting, Full path disclosure, Abuse of Functionality, Denial of Service, Arbitrary File Upload, Content Spoofing and Information Leakage vulnerabilities. Rokbox uses TimThumb 1.16 and JW Player 4.4.198, so some of vulnerabilities are related to plugin itself, some to...
WHMCS 5.1.3 Full Path Disclosure vulnerabilities
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
OSClass 3.0.2 CSRF/FPD Vulnerabilities
---- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
vBulletin 5 Multiple Full Path Disclosure vulnerabilities
vBulletin 5.x suffers from multiple FPD's. Where there is a that means ALL FILES! /core/vb5/route/channel.php /core/vb5/route/conversation.php /core/vb5/route/.php /includes/api/interface/noncollapsed.php /includes/api/interface/collapsed.php 0day.today 2018-02-19...
WordPress 3.5 multiple path disclosure vulnerabilities
The new word press release has multiple full path disclosure vulnerabilities. author:- cyberboy website:- http://freemium-devils.in/ Greets :- Cyberace Legion , Ghost , S3v3n , Th3 D3stroyer , Captain Zap and team INDISHELL Exploit Title: wordpress 3.5 multiple path disclosure vulnerabilities Dat...
BF and FPD vulnerabilities in MODx
Hello 3APA3A! I want to warn you about security vulnerabilities in MODx. This is the first part of the vulnerabilities in this CMS the first 19 vulnerabilities. These are Brute Force and Full path disclosure vulnerabilities in MODx. It's about 0.x and 1.x Evolution versions of MODx CMS. In 2.x...
IPBoard 3.x.x/3.4 Full Path Disclosure
IPBoard Full Path Disclosure Exploit: admin/upgrade/index.php?app=upgrade&s=§ion=index&do=login Dork: intext:Community Forum Software by IP.Board Fix: Turn off displayerrors in php.ini 0day.today 2018-03-13...
vBulletin 4.x/5.x multiple Full Puth Disclosure Vulnerability
A large list of Full Path Disclosure for vBulletin /includes/api/commonwhitelist2.php /includes/api/commonwhitelist5.php /includes/api/commonwhitelist6.php /includes/api/1/albumalbum.php /includes/api/1/albumeditalbum.php /includes/api/1/albumlatest.php /includes/api/1/albumoverview.php...
Wordpress Plugins - my-link-order Full Path Disclosure Vulnerability
My Link Order allows you to set the order in which links and link categories will appear in the sidebar. Uses a drag and drop interface for ordering. Adds a widget with additional options for easy installation on widgetized themes. Souhail Hammou - Independant Security Researcher & Penetration...
OpenCart v. 1.5.1.3 Full Path Disclosure Multiple
There are multiple pages in opencart 1.5.1.3 that disclose the full path. url/catalog/controller/account/address.php url/catalog/controller/account/account.php url/catalog/controller/account/download.php url/catalog/controller/account/edit.php url/catalog/controller/error/notfound.php everything ...
Wordpress 3.4.2 JetPack Full Path Disclosure
Exploit for php platform in category web applications Exploit Title: Full Path Disclosure Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Wordpress 3.4.2 - JetPack Category:: WebApps Google dork: inurl:...
Moodle 1.9.14.2 Full Puth Disclosure Vulnerability
Exploit for php platform in category web applications Exploit Title: Full Path Disclosure --- Moodle 1.9.x - 1.9.14.2 Date: 2012 / 11 / 30 Author: r00tc0d3rs WebSite: www.r00tc0d3rs.org Facebook: www.facebook.com/r00tc0d3rs Twitter: @r00tc0d3rs Version: Moodle 1.9.x - 1.9.14.2 Category:: WebApps...
Wordpress 3.4.2 Full Path Disclosure Vulnerability
Exploit for php platform in category web applications The Full Path Disclosure is in Wordpress = 3.4.2, with this information you can get the path to the site you're in and in most of the cases cpanel's username. To see it go to: http://path/wp-includes/rss-functions.php Examples:...
Newscoop 4.0.2 Blind SQLi & Path Disclosure Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
vBulletin 4.2.0 Full Path Disclosure Vulnerability
Exploit for php platform in category web applications The Full Path Disclosure is vBulletin 4.2.0, in forumrunner. With Full Path Disclosure you can get the path to the forum you're in and also most of the times is the same cpanel's username. To see it go to:...
Newscoop 4.0.2 Path Disclosure / SQL Injection
================================================================================ Vulnerable Software: Newscoop 4.0.2 Official site: sourcefabric.org Vulnerabilities: Blind SQLi & Path Disclosure Condition to exploit this vulnerability: GPC must be set OFF. Discovered by: AkaStep && KASIBOGLAN...
MyBB 1.6.8 multiple full-path disclosure vulnerability
Exploit for php platform in category web applications Title: MyBB 1.6.8 FPD Author: KrypTiK Vendor or Software Link: www.mybb.com/downloads Version: MyBB 1.6.8 Latest Category: webapps Google Keywords: intext:Powered By MyBB, © 2002-2012 MyBB Group Tested on: Linux 1...