WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.The WordPress WHMCS Bridge plugin has a cross-site scripting vulnerability that allows an attacker to...

WHMCS Bridge < 6.3 - Subscriber+ Stored Cross-Site Scripting

The plugin is vulnerable to Stored Cross-Site Scripting via the ccwhmcsbridgeurl parameter found in the /whmcs-bridge/bridgecp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1. Due to missing authorization checks on the ccwhmcsbridgeaddadmin...

WordPress WHMCS Bridge plugin <= 6.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered in WordPress WHMCS Bridge plugin versions = 6.1. Solution Update the WordPress WHMCS Bridge plugin to the latest available version at least 6.3...

WordPress WHMCS Bridge plugin <= 6.1 - Authenticated Arbitrary Plugin Settings Change vulnerability

Authenticated Arbitrary Plugin Settings Change vulnerability discovered in WordPress WHMCS Bridge plugin versions = 6.1. Solution Update the WordPress WHMCS Bridge plugin to the latest available version at least 6.3...

WordPress WHMCS Bridge plugin <= 6.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WHMCS Bridge plugin versions = 6.1. Solution Update the WordPress WHMCS Bridge to the latest available version at least 6.3...

Design/Logic Flaw

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

Summary: CVE-2017-6513 affects Softaculous Virtualizor’s WHMCS Reseller Module V2 (version 2.0.2) prior to 2.9.1.0. Affected component: WHMCS Reseller Module for Virtualizor. Root cause (as stated): The module does not verify the user correctly, enabling a remote authenticated user to access a mo...

WHMCS Addon VMPanel 2.7.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection

WHMCompleteSolution WHMCS Addon VMPanel 2.7.4 - SQL Injection ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

VMPanel 2.7.4 SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

Unified Layer Shell Upload

/------ Unified-Layer Unrestricted File Upload Exploit /------ Author: UmPire / [email protected] /------ Iran Security Group / iransec.net Hi guys, With this exploit, You can upload files with any extensions you want in sites that are hosted on unified layer and its children like bluehost,...

WHMCS 5.2.7 SQL Injection

SQL injection in firstname of clientarea.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WHMCS 4.x (invoicefunctions.php, id param) - SQL Injection Vulnerability

No description provided by source. Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:Powered by WHMCompleteSolution OR inurl:submitticket.php?? Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versio...

WHMCS 3.x.x (clientarea.php) Local File Disclosure

No description provided by source. Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com...

WHMCS 5.2.7 - SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python 2013/10/03 - WHMCS 5.2.7 SQL Injection http://localhost.re/p/whmcs-527-vulnerability url = 'http://clients.target.com/' wopsie dopsie useremail = '[email protected]' just create a dummie account at /register.php userpwd = 'hacker' impor...

WHMCS Group Pay Plugin 1.5 (grouppay.php, hash param) - SQL Injection

No description provided by source. Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction...

WHMCS Control 2 (announcements.php) SQL Injection

No description provided by source. Software: WHMCS control 2 Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or inurl:WHMCS or' announcements.php Off. site: www.MiXaTy.com Author Author: Islam DefenDers Date: 2.5.2010 Contact: email:...