EUVD-2012-4845

Malware in sbrugna...

CVE-2012-4920

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

Directory traversal

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

CVE-2012-4920

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

CVE-2012-4920

CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...

Forums Plugin for WordPress 'url' Parameter Arbitrary File Disclosure

The Forums Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'url' parameter of the zingforumoutput function in the zingiri-forum/forum.php script. An unauthenticated, remote...