joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 已知 Joomla! 3.4.6 以下所有版本均存在漏洞。但在 PHP 版本低于 5.5.29、5.6.13 及 5.5 以下时可成功利用。 演示：https://www.youtube.com/watch?v=twqYpn1ir4o...

CVE-2018-25324 Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath

Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes into the wpabspath parameter on PHP versions before 5.3.4. Attackers can supply malicious wpabspath values to...