WordPress NewStatPress 1.2.4 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptinginthewordpressnewstatpressplugin.html Abstract A persistent Cross-Site Scripting XSS vulnerability has been found in the WordPress NewStatPress plugin. By using this...

PT-2016-5662 · Ruby · Safemode

Name of the Vulnerable Software and Affected Versions: Safemode gem versions prior to 1.2.4 Description: The issue allows context-dependent attackers to obtain sensitive information via the inspect method when the Safemode gem is initialized with a delegate object that is a Rails controller...

PT-2016-1277 · Mozilla +5 · Firefox Esr +8

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Description: The issue is caused by a heap-based buffer overflow in the Code.cpp function of the Libgraphite...

PT-2016-1279 · Mozilla +5 · Firefox +9

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Thunderbird affected versions not specified Description: The issue is related to the TtfUtil:LocaLookup function in...

DotClear <= 1.2.4 (prepend.php) Arbitrary Remote Inclusion Exploit

No description provided by source...

Basic Analysis and Security Engine 1.2.4 PrintFreshPage Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17391/info BASE is prone to a cross-site scripting vulnerability. The application fails to properly sanitize user-supplied input in the 'PrintFreshPage' function. An attacker may leverage this issue to have arbitrary scri...

Wordpress Fancy Gallery Plugin 1.2.4 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability Version : 1.2.4 link : http://codecanyon.net/item/fancy-gallery-wordpress-plugin/400535 Price : 18$ Date : 22-06-2012 Google Dork : inurl:/wp-content/plugins/radykal-fancy-galler...

Plume CMS 1.2.4 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Plume CMS 1.2.4 Multiple Local File Inclusion Vulnerabilities +Title: Plume CMS 1.2.4 Multiple Local File Inclusion Vulnerabilities +Version: 1.2.4 other or lower version may be also affected +Download: http://sourceforge.net/projects/pxsystem/files/ +Author:...

Wordpress Font Uploader Plugin 1.2.4 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date : 01-06-2012 Google Dork :...

CVE-2012-1414

Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...

WordPress Fancy Gallery 1.2.4 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload

Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date : 01-06-2012 Google Dork :...

WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload

WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date ...

Zikula CMS CSRF Vulnerability

This host is running Zikula and is prone to cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: gbzikulacsrfvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Zikula CMS CSRF Vulnerability Authors: Madhuri D - Updated By: Madhuri D on 2011-02-11 - Added CVE Copyright: Copyright c...

Zikula CMS <= 1.2.4 CSRF Vulnerability

Exploit for php platform in category web applications 1. OVERVIEW The Zikula 1.2.4 and lower versions were vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND Zikula is a Web Application Toolkit, which allows you to run impressive websites and build powerful online applications. Zikula h...

MantisBT Multiple Vulnerabilities

This host is running MantisBT and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmantisbtmultvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ MantisBT Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Vulnerabilitiy in extension Tip-A-Friend (tipafriend)

It has been discovered that the extension Tip-A-Friend tipafriend is susceptible to Cross Site Scripting XSS attacks. Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: 1.2.3 Vulnerability Type: Cross Site Scripting Severity:...

Secunia Research: Pulse CMS Cross-Site Request Forgery

====================================================================== Secunia Research 08/04/2010 - Pulse CMS Cross-Site Request Forgery - ====================================================================== Table of Contents Affected Software......................................................

freeSSHd Pre-Authentication Error Remote DoS Vulnerability

freeSSHd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...