108 matches found
PT-2018-16202 · Unknown · Git-Dummy-Commit
Name of the Vulnerable Software and Affected Versions: git-dummy-commit version 1.3.0 Description: A command injection issue allows OS level commands to be executed due to an unescaped parameter. Recommendations: For git-dummy-commit version 1.3.0, consider restricting the use of the vulnerable...
WooCommerce CSV-Importer-Plugin 3.3.6 - Remote Code Execution
Exploit Title: Plugin Woocommerce CSV importer 3.3.6 – RCE – Unlink Date: 08/04/2018 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/woocommerce-csvimport/ Software Link: https://wordpress.org/plugins/woocommerce-csvimport/ Contact: http://twitter.com/lenonleite Website...
WordPress Car Rental System v2.5 Plugin - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Car Rental System v2.5 Exploit Author: TAD GROUP Vendor Homepage: https://www.bestsoftinc.com/ Software Link: https://www.bestsoftinc.com/car-rental-system.html Version: 2.5 Contact: email protected Website: https://tad.bg...
WordPress WP Vault 0.8.6.6 Local File Inclusion
Exploit Title: WP Vault 0.8.6.6 a Plugin WordPress a Local File Inclusion Date: 28/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-vault/ Software Link: https://wordpress.org/plugins/wp-vault/ Contact: http://twitter.com/lenonleite Website:...
Wordpress Plugin Answer My Question 1.3 - SQL Injection
1 - Description $POST'id' is not escaped. Url is accessible for any user. http://lenonleite.com.br/en/blog/2016/11/11/answer-my-question-1-3-plugin-for-wordpress-sql-injection/ 2 - Proof of Concept html...
WordPress Answer My Question 1.3 SQL Injection
Exploit Title: Answer My Question 1.3 Plugin for WordPress a Sql Injection Date: 10/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/answer-my-question/ Software Link: https://wordpress.org/plugins/answer-my-question/ Contact: http://twitter.com/lenonleite Websit...
XSS vulnerability in source tab configure project
Create a new group named "alert"XSS" 2. In the OnDemand administration section click Fisheye, then Configure to the right of the project name This vulnerability is due to an unescaped group.name parameter in projectrepositorypermissions.vm e.g...