The Wordpress Plugin Playlist for Youtube version 1.32 is vulnerable to stored cross-site scripting (XSS) attack. By injecting a malicious XSS payload into the 'Name' or 'Playlist ID' properties when adding a new playlist, an attacker can execute arbitrary scripts in the context of a user's browser.
The FD Script application fails to properly sanitize user-supplied input, which can be exploited by an attacker to retrieve arbitrary files from the vulnerable system. This vulnerability exists in FD Script 1.32 and prior versions. By sending a specially crafted request to the 'download.php' script with a manipulated 'fname' parameter, an attacker can retrieve sensitive information from the targeted system, potentially aiding in further attacks.
Ftp Server 1.32 Insecure Data Storage, the result of storing confidential information insecurely on the system i.e. poor encryption, plain text, access control issues etc. Attacker can find out username/password of valid user via /data/data/com.theolivetree.ftpserver/shared_prefs/com.theolivetree.ftpserver_preferences.xml
Crux Gallery version 1.32 is vulnerable to Local File Inclusion. The vulnerability exists due to the lack of proper sanitization of user-supplied input to the 'theme' parameter in 'index.php' script. An attacker can exploit this vulnerability to include arbitrary files from the web server and execute arbitrary code on the vulnerable system.
You can access to the admin panel altering the cookie and adding a parameter in the navigation bar. Navigate by the admin panel adding the parameter '&name=users' in the navigation bar.
WordPress Integrator is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
phpATM is the acronym for PHP Advanced Transfer Manager and is a free, open source, PHP based Upload and Download manager. But unlike most other of its kind it stores the data in flat text files and therefore does not require a database like MySQL installed on the web server. The bugged code is in the upload function. Generally phpATM lets you to register, and then upload some files (no admin privileges required). The hacking prevention is setted up by a regular expression to avoid .php files upload. So if we can upload a file with a space at the end, like this: "shell.php ", and the file system is running under Microsoft Windows, we can bypass the eregi, reaching the target to upload a php script file(like a shell)! The basic requirement is that the server is a Windows based server! You can upload the shell using a local proxy, like burp suite, or use the exploit below.
TimThumb is an image resizing utility, widely used in many WordPress themes. It is prone to a Remote Code Execution vulnerability, due to the script does not check remotely cached files properly. By crafting a special image file with a valid MIME-type, and appending a PHP file at the end of this, it is possible to fool TimThumb into believing that it is a legitimate image, thus caching it locally in the cache directory.
Multiple SQL Injection vulnerabilities exist in delpino73 Blue-Smiley-Organizer 1.32. An attacker can exploit these vulnerabilities to inject malicious SQL commands into the application which can be used to access, modify or delete data from the database. The first vulnerability is a boolean-based blind SQL injection which can be exploited by sending a specially crafted payload to the 'datetime' parameter. The second vulnerability is a time-based blind SQL injection which can be exploited by sending a specially crafted payload to the 'datetime' parameter. An attacker can also exploit this vulnerability to pop a PHP command shell by sending a specially crafted payload to the 'datetime' parameter.
This plugin shows upcoming calendar events on the forum index and portal page. Event names are vulnerable to XSS. Go to the calander.php page and add a new event. Input a payload for the event name <script>alert('XSS')</script> Payload will be executed on index.php
Services By CQR