114 matches found
CVE-2025-2882: Exposure of Sensitive Information to an Unauthorized Actor
The GreenPaytm by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in th...
CVE-2025-2840
The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information...
CVE-2025-2840: Exposure of Sensitive Information to an Unauthorized Actor
The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information...
CVE-2023-5052: Improper Neutralization of Input During Web Page Generation
vulnerability in Uniform Server Zero, version 10.2.5, consisting of an XSS through the /usextra/phpinfo.php page. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and partially take over their session details...
CVE-2023-5052
CVE-2023-5052 concerns Uniform Server Zero (v10.2.5) with a cross-site scripting (XSS) flaw in the /us_extra/phpinfo.php page. The vulnerability enables an attacker to craft a query that, when viewed by an authenticated user, can partially hijack session details, as described in the CVE. The CVSS...
Expedia Group Bug Bounty: Sensitive information for phpinfo.php at https://products.ean.com/
Vulnerability description not provided...
Instagram Clone 1.0 - Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Instagram Clone 1.0 - Arbitrary File Upload Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/justinwilliam Software Link:...
cs.siena.edu Improper Access Control vulnerability
Open Bug Bounty ID: OBB-631767 Description| Value ---|--- Affected Website:| cs.siena.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
File upload vulnerability in PHPCMS Content Publishing Management function module
PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. There is a file upload vulnerability in the PHPCMS content publishing...
phpMyAdmin 4.0.10.x < 4.0.10.18 / 4.4.15.x < 4.4.15.9 / 4.6.x < 4.6.5 Multiple Vulnerabilities
Binary data 9830.prm...
CVE-2016-9848: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in phpMyAdmin. phpinfo phpinfo.php shows PHP information including values of HttpOnly cookies. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...
Imagevue 2.8.9 XSS / Password Disclosure
| Title : Imagevue.v2.8.9 Multi Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : http://www.dl.persianscript.ir/script/Imagevue.v2.8.9.PHP.NULL-DGTPersianScript.ir.rar ======================================= App Msg Error :...
WHM.AutoPilot 2.4.6.5 - Multiple Vulnerabilities
WHM.AutoPilot 2.4.6.5 - Multiple Vulnerabilities WHM.AutoPilot Multiple Vulnerabilities Vendor: Benchmark Designs, LLC Product: WHM.AutoPilot Version: = 2.4.6.5 Website: http://www.whmautopilot.com/ BID: 12119 CVE: CVE-2004-1420 CVE-2004-1421 CVE-2004-1422 OSVDB: 12693 12694 12695 12696 12697...
EasyCart 2.0.5 - inc/admin/phpinfo.php Direct Request Remote Information Disclosure
The Shopping Cart & eCommerce Store WordPress plugin was affected by an inc/admin/phpinfo.php Direct Request Remote Information Disclosure security vulnerability...
CVE-2014-4942
The EasyCart wp-easycart plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function...
CVE-2014-4942: Exposure of Sensitive Information to an Unauthorized Actor
The EasyCart wp-easycart plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function...
PHP 4.x/5.0.1 PHP_Variables Remote Memory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11334/info A vulnerability is reported to present itself in the array parsing functions of the 'phpvariables.c' PHP source file. The vulnerability occurs when a PHP script is being used to print URI parameters or data, th...
phpMyAdmin 'phpinfo.php' Information Disclosure Vulnerability (PMASA-2010-10) - Active Check
phpMyAdmin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
