longitudes.ups.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626926 Description| Value ---|--- Affected Website:| longitudes.ups.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

www2.cuny.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-626925 Description| Value ---|--- Affected Website:| www2.cuny.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

unitehere.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-625043 Description| Value ---|--- Affected Website:| unitehere.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

LocalTapiola: xmlrpc.php FILE IS enable it will used for bruteforce attack and denial of service

hy https://www.lahitapiolarahoitus.fi is wordpress site Wordpress that have xmlrpc.php enabled for pingbacks, trackbacks, etc. can be made as a part of a huge botnet causing a major DDOS. The website https://www.lahitapiolarahoitus.fi has the xmlrpc.php file enabled and could thus be potentially...

Bo-blog 2.1.1 xmlrpc.php 上传漏洞

No description provided by source...

withinsecurity: DDOS using xmlrpc.php

Wordpress blogs that have xmlrpc.php enabled for pingbacks, trackbacks, etc. can be made as a part of a huge botnet causing a major DDOS. The blog at withinsecurity.com has the xmlrpc.php file enabled and could thus be potentially used for such an attack against other victim hosts. In order to...

xmlrpc.php Library <= 1.3.0 - Remote Command Execute Exploit (2)

No description provided by source. ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| || | | / |/ | || || | | | | || /| |...

CVE-2014-2935: Improper Neutralization of Special Elements used in an OS Command

costview3/xmlrpcserver/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request...

WordPress 3.8.1 /xmlrpc.php拒绝服务漏洞

WordPress是一款内容管理系统。 WordPress 3.8.1 /xmlrpc.php 文件有ping其他主机的功能，通过这个功能可以请求多个站点，DDOS攻击别的网站。 0 WordPress 3.8.1 目前没有详细解决方案提供： http://www.wordpress.org...

WordPress 3.8.1 /xmlrpc.php 拒绝服务漏洞

No description provided by source...

emlog 5.0.1 xmlrpc.php 后门漏洞

emlog是一款流行的个人博客系统，其5.0.1版本存在后门文件，攻击者利用后门可以控制网站。 emlog 5.0.1...

WordPress 'xmlrpc.php' pingback.ping Server-Side Request Forgery

The WordPress install hosted on the remote web server is affected by a server-side request forgery vulnerability because the 'pingback.ping' method used in 'xmlrpc.php' fails to properly validate source URIs Uniform Resource Identifiers. A remote, unauthenticated attacker can exploit this issue t...

XML-RPC PingBack API Remote DoS Exploit (through xmlrpc.php)

Exploit for php platform in category dos / poc Exploit Title: XML-RPC PingBack API Remote Denial of Service exploit through xmlrpc.php Date: 04/01/2013 Category: Remote Exploit Author: D35m0nd142 Tested on: Debian Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common; use...

CVE-2010-5106: Undefined Security Weakness

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role...

FreePost 0.1 R1 Cross Site Scripting and Remote Command Execution

Exploit for php platform in category web applications ||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | prompt925105dc351c9fbef40bd10199aaa9e221c20a...

CVE-2008-0664: Undefined Security Weakness

The XML-RPC implementation xmlrpc.php in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors...

Sql injection

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897...

CVE-2007-3140

CVE-2007-3140 : SQL injection in WordPress 2.2 affecting the xmlrpc.php module. The vulnerability arises in the XML-RPC method wp.suggestCategories, where an input value is not properly sanitized and can be exploited by an authenticated user to execute arbitrary SQL commands. Exploitation notes i...

WordPress <= 2.2 - SQL Injection

Because of this vulnerability in xmlrpc.php, the authenticated users can execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall. Solution Update WordPress...

CVE-2007-3140: Undefined Security Weakness

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897...