Wordpress enable-latex plugin Remote File Include Vulnerabilities

No description provided by source. Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress enable-latex plugin Remote File Include Vulnerabilities Download......: http://wordpress.org/extend/plugins/enable-latex/ Exploit.......: http:/...

WordPress Meenews 5.1 Cross Site Scripting

Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/meenews/ Exploit.......: http://www.site.com/path/wp-content/plugins/meenews/newsletter.php?idnews=xs...

WordPress Enable-Latex Remote File Inclusion

Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress enable-latex plugin Remote File Include Vulnerabilities Download......: http://wordpress.org/extend/plugins/enable-latex/ Exploit.......:...

Zabbix <= 1.8.4 (popup.php) SQL Injection

Exploit for php platform in category web applications Exploit Title: Zabbix = 1.8.4 SQL Injection Google Dork: "Zabbix 1.8.4 Copyright 2001-2010 by SIA Zabbix" Date: November 24th, 2011 Author: Marcio Almeida Software Link:...

WordPress Lanoba Social Cross Site Scripting

Islamic Republic Of Iran Security Team Www.IrIsT.Ir wordpress Lanoba Social Plugin Xss Vulnerabilities Download......: wordpress.org/extend/plugins/lanoba-social-plugin/ Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.ir Exploit.......:...

WordPress Advanced Text Widget Cross Site Scripting

Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress advanced-text-widget Plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/advanced-text-widget/ Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.ir Exploit..........

WordPress Adminimize plugin suffers from a cross site scripting vulnerability

No description provided by source. a bug in Wordpress adminimize Plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress adminimize.1.7.21 Plugin Cross-Site Scripting Vulnerabilities Download......:...

WordPress Alert Before Your Post Cross Site Scripting

Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/alert-before-your-post/ Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.ir...

Tiki Wiki CMS Groupware Multiple XSS vulnerabilities

Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...

Tiki Wiki CMS Groupware Cross Site Scripting

Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...

WordPress Flexible Custom Post Type Cross Site Scripting

Islamic Republic Of Iran Security Team Www.IrIsT.Ir wordpress Flexible Custom Post Type plugin Xss Vulnerabilities Download......: http://wordpress.org/extend/plugins/flexible-custom-post-type/ Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AmiratIrIsT.ir Exploit.......:...

Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Local file inclusion. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.11.8 and below Vulnerability Type: Local file inclusion...

Multiple security vulnerabilities in AShop

Advisory: Multiple security vulnerabilities in AShop Advisory ID: INFOSERVE-ADV2011-02 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on AShop513 Vendor URL: http://www.ashopsoftware.com/ Vendor Status: fixed in Version 5.1.4 =========================...

AShop 5.1.3 Cross Site Scripting / Open Redirect

Advisory: Multiple security vulnerabilities in AShop 5.1.3 Advisory ID: INFOSERVE-ADV2011-02 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on AShop513 Vendor URL: http://www.ashopsoftware.com/ Vendor Status: fixed in Version 5.1.4...

SA-CONTRIB-2011-053 - Quiz - Cross Site Scripting

Quiz module allows the creation and taking of tests that are scored either automatically or manually by a teacher. The module contains several cross site scripting XSS vulnerabilities that can be exploited when quizzes are being created. These vulnerabilities are mitigated by the fact that an...

CmyDocument Content Management Application - XSS Vulnerabilities

Title: CmyDocument Content Management Application - XSS Vulnerabilities Software : CmyDocument Content Management Application Software Version : Unknownversion update : 2010-01-10 Vendor: http://cmydocument.com/ Vulnerability Published : 2011-07-11 Vulnerability Update Time : Status : Impact :...

SA-CONTRIB-2011-051 - Hotblocks module - multiple vulnerabilities

The HotBlocks module provides a rich experience for managing blocks. The module contained multiple vulnerabilities including Cross Site Scripting XSS, Access Bypass, and Cross Site Request Forgery CSRF. XSS is mitigated by the fact that an attacker must have a role with the permission "administer...

SA-CONTRIB-2011-052 - Views SQL Injection

The Views module enables you to list content in your site in various ways. The module doesn't sufficiently escape database parameters for certain filters/arguments on certain types of views with specific configurations of arguments. Versions affected Views 6.x-2.x versions prior to 6.x-2.13 Drupa...

GDTelcom Speedtest Denial Of Service

Title: GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vulnerability Software: GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dllVersion 1.0 Vulnerability Published :2011-10-15 Vulnerability Update Time :2011-09-10 Vendor: www.gdcn.comNo...

YaTFTPSvr TFTP Server Directory Traversal Vulnerability

Title: YaTFTPSvr TFTP Server Directory Traversal Vulnerability Software : YaTFTPSvr TFTP Server Software Version : 1.0.1.200 Vendor: http://sites.google.com/site/zhaojieding2/ Vulnerability Published : 2011-07-11 Vulnerability Update Time : Status : Impact : Medium Bug Description : YaTFTPSvr TFT...