75 matches found
Wordpress Zingiri Web Shop Plugin 2.2.0 - Remote File Inclusion
No description provided by source. Exploit Title: Zingiri Web Shop Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/zingiri-web-shop Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...
CVE-2012-4920
Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...
Directory traversal
Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...
CVE-2012-4920
Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...
CVE-2012-4920
CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...
WordPress Zingiri Web Shop插件未明安全漏洞
WordPress是一款内容管理系统。 该漏洞由未明原因引起，目前没有详细信息。 0 WordPress Zingiri Web Shop Plugin 2.x WordPress Zingiri Web Shop Plugin 2.6.5版本以修复此漏洞，建议用户下载使用： http://wordpress.org/plugins/zingiri-web-shop/changelog/...
Forums Plugin for WordPress 'url' Parameter Arbitrary File Disclosure
The Forums Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'url' parameter of the zingforumoutput function in the zingiri-forum/forum.php script. An unauthenticated, remote...
CVE-2012-6506
Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...
CVE-2012-6506
Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...
CVE-2012-6506
The CVE applies to the WordPress Zingiri Web Shop Plugin (
WordPress Zingiri Forums Plugin - Local File Include
Zingiri Forums plugin is prone to a local file include vulnerability. It allows an attacker to view files and execute local scripts in the context of the web server process. Solution Update the plugin...
WordPress Plugin Zingiri Forums - language Local File Inclusion
WordPress Plugin Zingiri Forums - language Local File Inclusion source: https://www.securityfocus.com/bid/56777/info The Zingiri Forums plugin for WordPress is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this...
WordPress Plugin Zingiri Forums - 'language' Local File Inclusion
source: https://www.securityfocus.com/bid/56777/info The Zingiri Forums plugin for WordPress is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the...
WordPress Zingiri Web Shop Plugin 2.5.0 - Arbitrary File Upload
WordPress Chenpress plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...
WordPress Plugin Zingiri Web Shop - path Arbitrary File Upload
WordPress Plugin Zingiri Web Shop - path Arbitrary File Upload source: https://www.securityfocus.com/bid/56659/info The Zingiri Web Shop plugin for WordPress is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may...
WordPress Zingiri Web Shop 2.5.0 Shell Upload
|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...
WordPress Plugin Zingiri Web Shop - 'path' Arbitrary File Upload
source: https://www.securityfocus.com/bid/56659/info The Zingiri Web Shop plugin for WordPress is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary files to the affected...
WordPress Zingiri Plugin <= 1.4.3 - Directory Traversal
Because of this vulnerability in forum.php, attackers can read arbitrary files in the "url" parameter to index.php. Solution Update the plugin...