WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload

Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins : http://downloads.wordpress.org/plugin/mm-forms-community.zip Date : 24-05-2012 Google Dork :...

WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload

Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date : 01-06-2012 Google Dork :...

WordPress Foxypress Shell Upload

Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/foxypress/ Author : Samm...

WordPress Nmedia WP Member Conversation 1.35.0 Shell Upload

Description : Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wordpress-member-private-conversation/ Plugins : http://downloads.wordpress.org/plugin/wordpress-member-private-conversation.1.3.zip Date :...

Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wordpress-member-private-conversation/ Plugins :...

WordPress Asset Manager 0.2 Shell Upload

Description : Wordpress Plugins - Asset Manager Shell Upload Vulnerability Version : 0.2 Link : http://wordpress.org/extend/plugins/asset-manager/ Plugins : http://downloads.wordpress.org/plugin/asset-manager.0.2.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/asset-manager/ Author ...

WordPress Nmedia User File Uploader Shell Upload

Description : Wordpress Plugins - Nmedia user file uploader Shell Upload Vulnerability Version : 1.8 Link : http://wordpress.org/extend/plugins/nmedia-user-file-uploader/ Plugins : http://downloads.wordpress.org/plugin/nmedia-user-file-uploader.1.8.zip Date : 26-05-2012 Google Dork :...

WordPress Plugin HTML5 AV Manager 0.2.7 - Arbitrary File Upload

WordPress Plugin HTML5 AV Manager 0.2.7 - Arbitrary File Upload Description : Wordpress Plugins - HTML5 AV Manager for WordPress Shell Upload Vulnerability Version : 0.2.7 Link : http://wordpress.org/extend/plugins/html5avmanager/ Plugins :...

WordPress Plugin WP-Property 1.35.0 - Arbitrary File Upload

Description : Wordpress Plugins - WP-Property - WordPress Powered Real Estate and Property Management Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wp-property/ Plugins : http://downloads.wordpress.org/plugin/wp-property.zip Date : 26-05-2012 Google Dork :...

WordPress Plugin Marketplace Plugin 1.5.0 < 1.6.1 - Arbitrary File Upload

Description : Wordpress Plugins - WP Marketplace Shell Upload Vulnerability Version : 1.5.0 - 1.6.1 Link : http://wordpress.org/extend/plugins/wpmarketplace/ Plugins : http://downloads.wordpress.org/plugin/wpmarketplace.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/wpmarketplace/...

WordPress Plugin Asset Manager 0.2 - Arbitrary File Upload

Description : Wordpress Plugins - Asset Manager Shell Upload Vulnerability Version : 0.2 Link : http://wordpress.org/extend/plugins/asset-manager/ Plugins : http://downloads.wordpress.org/plugin/asset-manager.0.2.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/asset-manager/ Author ...

PHP4dvd - 'config.php' PHP Code Injection

source: https://www.securityfocus.com/bid/60257/info php4dvd is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the...

Discuz! X2. 5 latest GetShell0day detailed use-vulnerability warning-the black bar safety net

I heard that Discuz! This time and out of vulnerability, this was a GetShell vulnerabilities. This exploit is relatively new, it should be a lot of stations haven't updated it. Affects versions: 2 0 1 2 0 4 0 7, beta, rc Discuz! X2. 5 Release 2 0 1 2 0 4 0 7 edition in pregreplace using the e...

CVE-2012-1920

@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

Information disclosure

@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2012-1920

@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2012-1920

The CVE-2012-1920 issue affects the @Mail WebMail Client in AtMail Open-Source 1.04 and earlier. A remote attacker can obtain configuration information by issuing a direct request to install/info.php, which calls phpinfo. This is an information-disclosure vulnerability in the WebMail component. T...

PT-2012-3653

Name of the Vulnerable Software and Affected Versions AtMail Open-Source versions 1.04 and earlier Description The issue allows remote attackers to obtain configuration information by making a direct request to "install/info.php", which calls the phpinfo function. Recommendations For AtMail...

CVE-2012-1920: Exposure of Sensitive Information to an Unauthorized Actor

@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

EPractize Labs Subscription Manager 'showImg.php' PHP Code Injection Vulnerability

EPractize Labs Subscription Manager is prone to a remote PHP code- injection vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...