Wordpress fast-image-adder plugin remote file upload vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. fast-image-adder is one of the image fast-adder plugin. A remote file upload vulnerability exists in the fast-image-adder-uploader.php file in Wordpress fast-image-adder plugin v1.1 and...

Wordpress contus-video-comments plugin remote file upload vulnerability

WordPress is a suite of blogging platforms developed using the PHP language by the WordPress Software Foundation. contus-video-comments is one of the video comment plugins. A remote file upload vulnerability exists in version v1.0 of the Wordpress contus-video-comments plugin, which can be...

Picosafe Web Gui - Multiple Vulnerabilities

Exploit for php platform in category web applications - Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page :...

CVE-2016-1000112

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

Design/Logic Flaw

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

Design/Logic Flaw

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

Design/Logic Flaw

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000001

The CVE-2015-1000001 entry maps to WordPress plugin fast-image-adder (v1.1 and earlier). A Remote File Upload vulnerability exists in the uploader script (fast-image-adder-uploader.php), allowing an unauthenticated attacker to upload arbitrary files to the server (potentially leading to web shell...

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000000

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

CVE-2015-1000000

CVE-2015-1000000 affects the MailCWP WordPress plugin (around v1.99/v1.100) via an unauthenticated arbitrary file upload vulnerability. The root cause is improper access control in the upload logic (mailcwp-upload.php), allowing any user to upload a file without authentication or type checks, pot...

CVE-2015-1000013

CVE-2015-1000013 affects WordPress plugin csv2wpec-coupon v1.1. The vulnerability is an arbitrary file upload via csv2wpecCoupon_FileUpload.php caused by improper input sanitization of the uploaded file. The provided PoC indicates unauthenticated remote file upload is possible, using a crafted re...

Picosafe Web GUI - Multiple Vulnerabilities

Picosafe Web GUI - Multiple Vulnerabilities - Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page :...

Picosafe Web GUI - Multiple Vulnerabilities

Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page : picosafewebgui/webinterface/js/filemanager/filemanager.php ========================== | Remote...

EMC ViPR SRM Cross-Site Request Forgery Vulnerability (CNVD-2016-07741)

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

WordPress Contus Video Comments 1.0 File Upload

Title: Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2016-06-15 Download Site: https://wordpress.org/plugins/contus-video-comments/ Vendor: https://profiles.wordpress.org/hdflvplayer/ Vendor Notified: 2016-06-16...

Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts REST Plugin With Dynamic Method Invocation Remote Code Execution', 'Description' = %q This module exploits a remo...