CVE-2013-2744

CVE-2013-2744 affects WordPress BackupBuddy plugin, version 2.2.25, via importbuddy.php. The vulnerability allows remote attackers to disclose configuration information by triggering a step 0 phpinfo action that calls phpinfo. Impact is information disclosure of configuration data; no exploit det...

CVE-2013-2744: Exposure of Sensitive Information to an Unauthorized Actor

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...

PT-2013-3910

Name of the Vulnerable Software and Affected Versions BackupBuddy plugin version 2.2.25 Description The issue allows remote attackers to obtain configuration information. This is achieved by exploiting the importbuddy.php file in the BackupBuddy plugin, which calls the phpinfo function when a ste...

WordPress BackupBuddy Plugin <= 2.2.25 - Sensitive Data Exposure

This vulnerability is in importbuddy.php. It allows remote attackers to obtain configuration information via a step 0 phpinfo action. Solution Update the plugin...

Backupbuddy 2.2.4 Sensitive Data Exposure

Backupbuddy - sensitive data exposure in importbuddy.php "the premiere WordPress backup plugin to backup, restore and move WordPress" http://ithemes.com/purchase/backupbuddy/ known versions affected: v1.3.4, v2.1.4, v2.2.25, v2.2.28, v2.2.4, likely other versions also impact: access to wordpress...

SiteGo Local File Inclusion / Cross Site Scripting Vulnerabilities

SiteGo suffers from cross site scripting and local file inclusion vulnerabilities. Exploit Title: SiteGo Multiple Vulnerabilities Date: 02/07/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link:...

ezStats2 For Playstation Network 1.10 Local File Inclusion

ezStats2 for Playstation Network version 1.10 suffers from a local file inclusion vulnerability. Exploit Title: ezStats2 for Playstation Network v1.10 Local File Inclusion Vulnerability Date: 02/05/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link:...

ezStats For Battlefield 3 0.91 XSS / Local File Inclusion

ezStats for Battlefield 3 version 0.91 suffers from cross site scripting and local file inclusion vulnerabilities. Exploit Title: ezStats for Battlefield 3 v0.91 Multiple Vulnerabilities Date: 02/05/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link:...

ezStats For Battlefield 3 0.91 XSS / Local File Inclusion

Exploit Title: ezStats for Battlefield 3 v0.91 Multiple Vulnerabilities Date: 02/05/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.ezstats.org/ Software Link: http://ezstats.googlecode.com/files/ezStats2BF3v0.91.zip Tested on:...

Wordpress plugin wp-royal-gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress plugins wp-powerplaygallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

SQLiteManager 1.2.4 - Remote PHP Code Injection

!/usr/bin/env python ''' Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGame Vendor Homepage:...

phpliteadmin <= 1.9.3 Remote PHP Code Injection Vulnerability

PHP Lite Admin versions 1.9.3 and below suffer from a PHP code injection vulnerability. Exploit Title: phpliteadmin phpliteadmin.php1785: 'When you create a new database, the name you entered will be appended with the appropriate file extension .db, .db3, .sqlite, etc. if you do not include it...

WordPress Uploader 1.0.4 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Themes moneymasters Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Author = Fayzoun Facebook = http://fb.me/fayzoun.no.love Facebook page = http://fb.me/fayzoun.AO Google Dork = inurl:/wp-content/themes/moneymasters Mail : email protected / email protected Exploit: "@$uploadfile",...

IceWarp Webmail raw.php Information Disclosure

The version of IceWarp installed on the remote host is affected by an information disclosure vulnerability. A remote, unauthenticated attacker may be able to view PHP configuration information via the phpinfo function by requesting the webmail/pda/controller/raw.php script. %NASLMINLEVEL 70300 C...

PHP create_function injection command execution vulnerability-vulnerability warning-the black bar safety net

In PHP use createfunctionto create an anonymous function, if not strictly to the parameters passed to the filter, the attacker can construct a special string passed to createfunctionto execute arbitrary commands. In the following code as an example: ? php //how to exp this code...

Wordpress Themes- vithy Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- vithy Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16...

ecshop csrf getshell

简要描述： 吐槽下ecshop后台安全性真的太弱了。。前台组合xss来猥琐的让管理员后台getshell 详细说明： 0x0 后台getshell 在includes/clstemplate.php fetch函数 / 处理模板文件 @access public @param string $filename @param sting $cacheid @return sring / function fetch$filename, $cacheid = '' if !$this-seterror errorreportingEALL ^ ENOTICE; $this-seterror+...

53KF企业在线平台LFI一枚

简要描述： http://chat.53kf.com/ LFI一枚 配合 http://chat.53kf.com/test.php 的phpinfo信息...导致xxoo.. 详细说明： http://chat.53kf.com/login.php/ 修改请求 Cookie: customerservicelanguage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 结果： 加上phpinfo提供的信息： 未经授权....不进一步了。。 漏洞证明：...