182 matches found
WordPress Symposium Plugin <= 11.12.24 - Multiple Arbitrary File Upload
Because of this vulnerability, the attackers can execute arbitrary code by uploading a file with an executable extension using uploadify/uploadprofileavatar.php or uploadify/uploadadminavatar.php. Solution Update the plugin...
WordPress WP Symposium Plugin 'uid' Parameter Cross-Site Scripting Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
WordPress WP Symposium插件任意文件上传漏洞
WordPress是一款使用PHP语言开发的内容管理系统 用于WordPress的WP Symposium插件存在安全漏洞，允许恶意用户向系统上传任意文件 wp-content/plugins/wp-symposium/uploadify/uploadadminavatar.php和wp-content/plugins/wp-symposium/uploadify/uploadprofileavatar.php脚本允许向WEB ROOT中的文件夹上传任意扩展名的文件，攻击者可以上传恶意PHP脚本以WEB权限执行 0 WordPress WP Symposium Plugin 厂商解决方案...
CVE-2011-3841
Cross-site scripting XSS vulnerability in uploadify/getprofileavatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in uploadify/getprofileavatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
CVE-2011-3841
Cross-site scripting XSS vulnerability in uploadify/getprofileavatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
CVE-2011-3841
The CVE-2011-3841 entry concerns the WordPress WP Symposium plugin vulnerability: a Cross-Site Scripting (XSS) flaw in the file uploadify/get_profile_avatar.php that allows arbitrary script/HTML injection via the uid parameter. Affected versions are before 11.12.08. Root cause: input handling in ...
WordPress WP Symposium plugin <= 11.12.08 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress WP Symposium plugin ID; query to the variable $uid is not filtered 0day.today 2018-01-08...
WordPress Symposium Plugin <= 11.12.07 - XSS
Because of this vulnerability in uploadify/getprofileavatar.php, the attackers can inject arbitrary web script or HTML via the "uid" parameter. Solution Update the plugin...
WordPress WP Symposium 0.64 SQL Injection
Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid = ".$uid;...
WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress WP Symposium plugin = 0.64 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-symposium.0.64.zip Version: 0.64 tested --- Po...
WordPress Plugin Symposium 0.64 - SQL Injection
WordPress Plugin Symposium 0.64 - SQL Injection Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid =...
WordPress Symposium Plugin <= 0.64 - SQL Injection
This WordPress Symposium plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE...
WordPress Plugin Symposium 0.64 - SQL Injection
Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid = ".$uid;...
$30 Child Toy is enough to hack FBI Radios
$30 Child Toy is enough to hack FBI Radios The portable radios used by many federal law enforcement agents have major security flaws that allowed researchers to intercept hundreds of hours of sensitive traffic sent without encryption over the past two years, according to a new study being release...
Video: Researchers Knock Out a $3K First Responder's Radio With a $30 Children's Toy
During the Reagan Administration, the ‘government waste’ meme was all about $600 toilet seats and $300 hammers. Those looking for a more contemporary example of how government procurement gets it wrong might point, instead, to Project 25 P25, a decade old effort to provide first responders and...
Security Metrics Go Prime Time at Metricon 6
The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...
Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability
Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle QuickTime media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...
Research: Password 'secret question' woefully insecure
In research to be presented at the IEEE Symposium on Security and Privacy virginia.edu this week, researchers from Microsoft and Carnegie Mellon University plan to show that the secret questions used to secure the password-reset functions of a variety of websites are woefully insecure. In a study...