1398 matches found
Code injection
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
CVE-2011-0701
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
CVE-2011-0701
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
DEBIAN-CVE-2011-0701
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
CVE-2011-0701
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
CVE-2011-0701
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...
CVE-2011-0701
CVE-2011-0701 affects WordPress prior to 3.0.5. The vulnerability exists in wp-admin/async-upload.php in the media uploader, allowing remote authenticated users to read (1) draft posts or (2) private posts by sending a modified attachment_id parameter. Impact is partial disclosure of draft/privat...
WordPress < 3.0.5 Multiple Vulnerabilities
Binary data 5785.prm...
WordPress < 3.0.5 Multiple Vulnerabilities
According to its version number, the installation of WordPress hosted on the remote web server is affected by multiple vulnerabilities : - The application is prone to multiple cross-site scripting vulnerabilities. An attacker can exploit these issues through the 'title' field of the 'Quick/Bulk...
WordPress Uploader 1.0.0 Shell Upload
------------------------------------------------------------------------ Software................WordPress Uploader 1.0.0 Vulnerability...........Arbitrary Upload Download................http://wordpress.org/extend/plugins/uploader/ Release Date............1/24/2011 Tested On...............Window...
WordPress Plugin Uploader 1.0 - num Cross-Site Scripting
WordPress Plugin Uploader 1.0 - num Cross-Site Scripting source: https://www.securityfocus.com/bid/45984/info The Uploader Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...
WordPress Uploader 1.0.0 Cross Site Scripting
------------------------------------------------------------------------ Software................WordPress Uploader 1.0.0 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/uploader/ Release Date............1/24/2011 Tested...
WordPress Uploader Plugin 1.0 - Cross-Site Scripting Vulnerability
This WordPress Uploader plugin's "num" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...
WordPress Plugin Uploader 1.0 - 'num' Cross-Site Scripting
source: https://www.securityfocus.com/bid/45984/info The Uploader Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
“Happy one hundred phases in the Park”photo album GETSHELL vulnerabilities-vulnerability warning-the black bar safety net
The vulnerability appears in the index.php if$do == 'upload' if$POST'formsub' $file = $FILES'upload'; if!$ file'error' ifstrpos$file'type', 'image' === 0 $hash = $POST'i'.'. jpg'; //if IIS, then here can be self-configured IIS malformed file extension to get a webshell...
PHPGallery 1.1.0 Cross Site Request Forgery
------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...
PHPGallery 1.1.0 - Cross-Site Request Forgery
PHPGallery 1.1.0 - Cross-Site Request Forgery ------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ :...
xt:Commerce Shopsoftware Arbitrary File Upload
============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor Date: 08/11/2010 Author: Net.Edit0r Software Link:...
xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload
xt:Commerce Shopsoftware 34 - FCKeditor Arbitrary File Upload ============================================================= xt:Commerce Shopsoftware fckeditor File Upload Vulnerability ============================================================= Exploit Title: xt:Commerce Shopsoftware fckeditor...
UBUNTU-CVE-2010-4208
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...