PT-2018-18638

Name of the Vulnerable Software and Affected Versions WolfCMS version 0.8.3.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify plugin settings by crafting a malicious request. This can be done by exploiting the...

CVE-2018-8814: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/pluginname/settings by crafting a malicious request...

CVE-2012-1839: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXPClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pluginName or 2 pluginPath...

PT-2012-3583

Name of the Vulnerable Software and Affected Versions AjaXplorer versions 3.2.x through 3.2.4 AjaXplorer versions 4.0.x through 4.0.3 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pluginName or pluginPath parameter in a "get...