WordPress 3.9.x < 3.9.15 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the PHPMailer component in the class.phpmailer.php script due to improper handling of sender email addresses. An...

CVE-2017-5490

Cross-site scripting XSS vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to...

CVE-2017-5490

Cross-site scripting XSS vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to...

CVE-2017-5490: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to...

CVE-2016-1564: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a 1 stylesheet name or 2 template name to wp-admin/customize.php...

WordPress <= 4.4.0 - Multiple XSS

Multiple cross site scripting vulnerabilities were found in wp-includes/class-wp-theme.php. These vulnerabilities allow the attackers to inject arbitrary web script or HTML via a 1. stylesheet name or 2. template name to wp-admin/customize.php. Solution Upgrade WordPress...

Chyrp 'class/Theme.php' Cross-Site Scripting Vulnerability

Chyrp is an open source lightweight blog Blog engine based on PHP and MySQL. Chyrp suffers from a cross-site scripting vulnerability. As the program fails to have adequate filtering of user-submitted input. An attacker could exploit the vulnerability to execute arbitrary script code in the browse...

CVE-2015-5734: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string...

WordPress Legacy Theme <= 4.2.3 - XSS

This vulnerability exists in the Legacy theme preview implementation in wp-includes/theme.php. It allows an attacker to inject arbitrary HTML or web script via a crafted string. Solution Update the theme...

Annonces 1.2.0.1 - admin/theme.php File Upload PHP Code Execution

The Annonces WordPress plugin was affected by an admin/theme.php File Upload PHP Code Execution security vulnerability...

WordPress 2.1.1 wp-includes/theme.php iz Variable Arbitrary Command Execution

No description provided by source...

CVE-2012-6621: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Email Address or 2 Custom Permalink Structure fields in admin/settings.php; 3 path parameter to admin/upload.php; 4 err paramet...

GetSimple CMS 3.1 admin/theme.php err Parameter Reflected XSS

GetSimple CMS 3.1 admin/theme.php err Parameter Reflected XSS. CVE-2012-6621. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53501/info GetSimple CMS is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

ADAS Project SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Flatnux 2009-01-27 Remote File Inclusion

@ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global $forumback, $forumborder;...

Flatnux 2009-01-27 - Remote File Inclusion

@ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global $forumback, $forumborder;...

Flatnux 2009-01-27 - Remote File Inclusion

Flatnux 2009-01-27 - Remote File Inclusion @ flatnux Flatnux-2009-01-27 RFI zależności P + Alfons Luja + 2009 + grts : All friends VULN : +++ include/theme.php ... ?php if eregi"theme.php", $SERVER'PHPSELF' die; // 0 -- I dont give a fuck global $theme, $FNROOTPATH,$lang; //-- 1 global...

Flatnux 2009-01-27 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================== Flatnux 2009-01-27 Remote File Inclusion Vulnerability ====================================================== @ flatnux Flatnux-2009-01-27 RFI zaleznosci P + Alfons Luja + 2009 + grts ...

CVE-2008-4769

Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...

DEBIAN-CVE-2008-4769

Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...