98 matches found
WordPress <= 4.3.0 权限提升漏洞
越权操作位于 XMLRPC 文章编辑操作中，涉及文件 /wp-includes/class-wp-xmlrpc-server.php 5042-5327 其中关键代码分析： public function mweditPost $args $this-escape $args ; $postID = int $args0; // 获取需要编辑的文章ID 用户所属 $username = $args1; // 从请求的xml中获取用户名 $password = $args2; // 从请求的xml中获取用户密码 $contentstruct = $args3; // 从请求的xml中获取结...
jkkeskus.ee XSS vulnerability
Vulnerable URL:...
ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PhpOpenChat 3.0.x ADODB Server.php \sql\ SQL injection\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n; if $argc4...
PsychoStats <= 2.3 - Server.PHP Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerab...
Nucleus 3.61 - Multiple Remote File Include
No description provided by source. Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y sh3ll????????????? 13. / 14...
CVE-2012-2997: Exposure of Sensitive Information to an Unauthorized Actor
XML External Entity XXE vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0.0 through 10.2.4 and 11.0.0 through 11.2.1 allows remote authenticated users to read arbitrary files via a crafted XML file...
F5 Networks BIG-IP - XML External Entity Injection
F5 Networks BIG-IP - XML External Entity Injection source: https://www.securityfocus.com/bid/57496/info F5 Networks BIG-IP is prone to an XML External Entity injection vulnerability. Attackers can exploit this issue to obtain potentially sensitive information from local files on computers running...
CVE-2012-4421: Undefined Security Weakness
The createpost function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing...
Unfixed XSS vulnerability at phpxmlrpc.sourceforge.net
Security researcher lljkrieg, has submitted on 16/05/2011 a cross-site-scripting XSS vulnerability affecting phpxmlrpc.sourceforge.net, which at the time of submission ranked 154 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...
Nucleus v3.61 Multiple Remote File Include
Exploit for php platform in category web applications Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y...
Nucleus 3.61 - Multiple Remote File Inclusions
Nucleus 3.61 - Multiple Remote File Inclusions Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y...
CVE-2010-4276: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the lztrackingsetsessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php...
FreeBSD Ports: lifetype
The remote host is missing an update to the system as announced in the referenced advisory. VID 116b0820-d59c-11da-8098-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include
Name : BLOG:CMS 4.2.1.c DIRPLUGINS Multiple Remote File Include Download From : http://dfn.dl.sourceforge.net/sourceforge/blogcms/blogcms.4.2.1.c.7z Or Here http://blogcms.com Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb...
Design/Logic Flaw
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...
CVE-2007-2780: Exposure of Sensitive Information to an Unauthorized Actor
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...
PsychoStats 2.3 - Server.php Full Path Disclosure
PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...
PsychoStats 2.3 - 'Server.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. PsychoStats 3.0.6b an...
Mambo Component Security Images 3.0.5 - Remote File Inclusion
Mambo Component Security Images 3.0.5 - Remote File Inclusion http://forge.joomla.org/sf/projects/comsecurityimages Marckusbest is the Best lamah of irc, fuck you comsecurityimages Mambo Remote File Include ------------------------------------------------------------------------------------ Bug...
Mambo Security Images Component <= 3.0.5 Inclusion Vulnerabilities
No description provided by source. http://forge.joomla.org/sf/projects/comsecurityimages Marckusbest is the Best lamah of irc, fuck you comsecurityimages Mambo Remote File Include ------------------------------------------------------------------------------------ Bug Found by: Drago84 greetz:...