WordPress plugin The Ultimate WordPress Toolkit – WP Extended 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Responsive Lightbox & Gallery 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

SimplePHPGal 0.7 - Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google...

SimplePHPGal 0.7 - Remote File Inclusion

Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur date:2020-05-05 Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google Chrome Category : Web Application Bug...

php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used

The graphemestrpos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...

PHPCMS 9.3.1 /phpcms/modules/attachment/attachments.php 文件上传漏洞

PHPCMS是国内一款非常流行的网站内容管理系统，其9.3.1版本中，当上传文件名为xxx.Php.jpg%20%20%20%20%20%20%20Php时，经过fileext函数反向查找"."，然后截断了Php，即可通过isimage的验证，又由于strpos是大小写敏感的，当后缀为Php时即可绕过strpos，最后上传至服务器，apache服务器可以解析该畸形文件，最终导致文件上传漏洞。 PHPCMS 9.3.1...