4609 matches found
WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download
Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-galler...
Cross-site scripting vulnerability in wordpress plugin super-slider
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin super-slider suffers from a cross-site scripting vulnerability due to improper filtering of user input,...
WordPress Plugin Slider Templatic Tevolution Arbitrary File Upload Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin Slider Templatic Tevolution has an arbitrary file upload vulnerability that can be exploited by...
WordPress Plugin Image Slider Arbitrary File Deletion Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin Image Slider version 1.1.41 and 1.1.89 has an arbitrary file deletion vulnerability that can be...
WordPress Plugin Slider Templatic Tevolution 2.3.6 - Arbitrary File Upload
WordPress Plugin Slider Templatic Tevolution 2.3.6 - Arbitrary File Upload Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck...
WordPress Slider Templatic Tevolution Plugin <= 2.3.5 - Arbitrary File Upload
This plugin comes with some premium WordPress themes from Templatic and is prone to an arbitrary file upload vulnerability. Solution Update the plugin to the latest version...
WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload
Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website: https://www.r3m1ck.us/ Category: webapps Google Dork:...
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion Vulnerability
WordPress Image Slider plugin versions 1.1.41 and 1.1.89 suffer from an arbitrary file deletion vulnerability. Details ================ Software: Image Slider Version: 1.1.41,1.1.89 Homepage: http://wordpress.org/plugins/image-slider-widget/ Advisory report:...
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion
Details ================ Software: Image Slider Version: 1.1.41,1.1.89 Homepage: http://wordpress.org/plugins/image-slider-widget/ Advisory report: https://security.dxw.com/advisories/arbitrary-file-deletion-vulnerability-in-image-slider-allows-authenticated-users-to-delete-files/ CVE: Awaiting...
WordPress Slider Plugin <= 1.1.89 - Authenticated Arbitrary File Deletion
This plugin is prone to an authenticated arbitrary file deletion vulnerability. Any user can can delete arbitrary files. Solution Update the plugin...
Slider <= 1.1.89 - Authenticated Arbitrary File Deletion
The Image Slider WordPress plugin was affected by an Authenticated Arbitrary File Deletion security vulnerability...
Cross-site scripting vulnerability in Wordpress plugin hulvire-slider
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin hulvire-slider. The program fails to filter user-supplied input, allowing an attacker to constru...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
Cross site scripting
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000122
The CVE-2016-1000122 entry describes XSS and SQL injection in the Huge IT Joomla Slider v1.0.9 extension. Connected sources corroborate affected functionality in the admin area: XSS via id parameter in ./admin/views/slider/tmpl/default.php and SQL injection in ./admin/models/slider.php. The root ...
