diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 1ccbb05a..6997aa7a 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -6422,12 +6422,20 @@ - SolveMedia 1.1.0 - CSRF Vulnerability + SolveMedia 1.1.0 - plugins.php API Key Manipulation CSRF - 24364 89585 - http://1337day.com/exploit/20222 51927 + 24364 + http://1337day.com/exploit/20222 + + CSRF + 1.1.1 + + + SolveMedia 1.1.0 - solvemedia.admin.inc Admin Options Page CSRF + + 106320 CSRF 1.1.1 @@ -12401,4 +12409,42 @@ + + + Simple Fields 1.1.6 - inc-admin-options.php Admin Functions CSRF + + 106316 + + CSRF + 1.2 + + + + + + Work The Flow File Upload 1.2.1 - wp-admin/admin-ajax.php accept_file_types Parameter Manipulation File Upload Restriction Bypass + + 106366 + 58216 + http://www.securityfocus.com/bid/67083 + http://packetstormsecurity.com/files/126333/ + + RCE + + + + + + File Gallery 1.7.9 - Settings Page create_function Function Remote Command Execution + + 106417 + 2014-2558 + 58216 + http://www.securityfocus.com/bid/67120 + + RCE + 1.7.9.2 + + +