WordPress Sniplets Plugin <= 1.2.2 - Multiple XSS vulnerabilities

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Sniplets Plugin <= 1.2.2 - Remote File Inclusion

Because of this vulnerability in modules/syntaxhighlight.php, the attackers can execute arbitrary PHP code via a URL in the "libpath" parameter. Solution Update the plugin...

Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities

No description provided by source. Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities RFI/XSS/RCE by Florinu ------------ djflorinuatyahoodotcom 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals must to be: ON Vuln code: ?php / Name: Syntax Highlight / includeonce...

WordPress Sniplets Plugin <= 1.2.2 - Eval Injection

Because of this vulnerability in modules/execute.php, the attackers can execute arbitrary PHP code via the "text" parameter. Solution Update the plugin...

Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Wordpress Plugin Sniplets 1.1.2 RFI/XSS/RCE Multiple Vulnerabilities ====================================================================== Wordpress Plugin Sniplets...

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/...

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: ?php / Name: Syntax Highlight / includeonce "$libpath/geshi/geshi.php"; Poc:...

Sniplets Plugin for WordPress execute.php 'text' Parameter Arbitrary Command Execution

The remote host is running Sniplets, a third-party text insertion plugin for WordPress. The version of Sniplets installed on the remote host passes user input to the 'text' parameter of the 'modules/execute.php' script before passing it to an 'eval' statement. Provided that PHP's 'registerglobals...

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...

wordpresssniplet-rfixssexec.txt

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...