anant shrivastava vulnerabilities and exploits

(subscribe to this query)

Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote malicious users to read arbitrary files via a .. (dot dot) in the fn parameter to (1) charts/treemap.php or (2) charts/zoomabletreemap.php.

Tera Charts Plugin Project Tera-charts 0.1

2 EDB exploits

SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.

Hdwplayer Hdw-player-video-player-video-gallery 2.4.2

1 EDB exploit

Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote malicious users to read arbitrary files via a .. (dot dot) in the file parameter.

Bookx Plugin Project Bookx 1.7

1 EDB exploit

SQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress allows remote malicious users to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php.

Wp Rss Poster Plugin Project Wp-rss-poster 1.0.0

1 EDB exploit

SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the enl-add-new page to wp-admin/admin.php.

Enl Newsletter Plugin Project Enl-newsletter 1.0.1

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook