PT-2018-13890

Name of the Vulnerable Software and Affected Versions DonLinkage version 6.6.8 Description An issue in DonLinkage allows SQL injection via specially crafted input in the "pages/proxy/php.php" and "pages/proxy/add.php" API endpoints, enabling an attacker to obtain database information. This issue...

CVE-2018-17092: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user...

CVE-2015-4133

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...

CVE-2015-4133: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...

PT-2015-6424

Name of the Vulnerable Software and Affected Versions ReFlex Gallery plugin versions prior to 3.1.4 Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the uploads/ directory...

Wordpress Plugin Reflex Gallery - Arbitrary File Upload Vulnerability

Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Vendor Homepage: https://wordpress.org/plugins/reflex-gallery/ Version: 3.1.3 Last Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork:...

GetSimple - Items Manager Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Plugin Flip Book - 'PHP.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54173/info Flip Book is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and...

WordPress Plugin Flip Book - PHP.php Arbitrary File Upload

WordPress Plugin Flip Book - PHP.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54173/info Flip Book is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker...

CVE-2007-5168: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules/serveurjeux.php or 2 conf/conf-php.php. NOTE: vector 1 is disputed by CVE because the requireonce is only reached when ...

CVE-2006-3112: Undefined Security Weakness

Chipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to php.php, which displays the output of the phpinfo function...