WordPress Simple File List 5.4 Shell Upload

!/usr/bin/python -- coding: utf-8 -- Exploit Title: Wordpress Plugin Simple File List 5.4 - Arbitrary File Upload Date: 2020-11-01 Exploit Author: H4rk3nz0 based off exploit by coiffeur Original Exploit: https://www.exploit-db.com/exploits/48349 Vendor Homepage: https://simplefilelist.com/ Softwa...

WordPress simple-file-list plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-file-list is a file list plugin that supports opening and downloading files. A path traversal vulnerability exists in WordPress...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

Input validation

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

CVE-2020-12832

WordPress Simple File List plugin (versions

PT-2020-13280

Name of the Vulnerable Software and Affected Versions WordPress Plugin Simple File List versions prior to 4.2.8 Description The issue arises from the application's failure to properly verify user-supplied input, allowing attackers to delete arbitrary files. This is particularly problematic in cas...

WordPress Plugin Simple File List 4.2.2 - Remote Code Execution

Exploit Title: Wordpress Plugin Simple File List 4.2.2 - Remote Code Execution Date: 2020-04-19 Exploit Author: coiffeur Vendor Homepage: https://simplefilelist.com/ Software Link: https://wordpress.org/plugins/simple-file-list/ Version: Wordpress Simple File List AUTHOR: coiffeur """ printbanner...

WordPress Simple File List plugin <= 4.2.2 - Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution (RCE)

Unauthenticated Arbitrary File Upload vulnerability leading to Remote Code Execution RCE discovered by h00die and coiffeur in WordPress Simple File List plugin versions = 4.2.2. Solution Update the WordPress Simple File List plugin to the latest available version at least 4.2.3...

WordPress Plugin Simple File List 5.4 - Remote Code Execution

Exploit Title: Wordpress Plugin Simple File List 5.4 - Remote Code Execution Date: 2020-04-2019 Exploit Author: coiffeur Vendor Homepage: https://simplefilelist.com/ Software Link: https://wordpress.org/plugins/simple-file-list/ Version: Wordpress v5.4 Simple File List v4.2.2 import requests impo...

WordPress Simple File List plugin <= 3.2.4 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

WordPress Simple File List plugin <= 3.2.4 - Authenticated Arbitrary File Delete vulnerability

Authenticated Arbitrary File Delete vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete

Arbitrary File Delete exist in Simple File List Plugin v 3.2.4 or below Authentication Required: Yes...

CVE-2017-16123

welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

simple-file-manager Path Traversal Vulnerability

simple-file-manager is a web-based file management utility. A path traversal vulnerability exists in versions of simple-file-manager prior to 2017-04-26. An attacker could use this vulnerability to read files...

CVE-2017-8297

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php the sole "Simple PHP File Manager" component...

Path traversal

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php the sole "Simple PHP File Manager" component...

CVE-2017-8297

A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php the sole "Simple PHP File Manager" component...

CVE-2017-8297

CVE-2017-8297 describes a path traversal vulnerability in the Simple PHP File Manager component (simple-file-manager) prior to 2017-04-26, affecting index.php. The issue is documented across multiple sources as allowing traversal to read files, with CVSS estimates indicating high to critical seve...