garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added Moneymasters FDP & File upload

Browse Source
This commit is contained in:
erwanlr
2013-01-06 15:02:39 +01:00
parent 2f76277a28
commit f8ba2b71f8
2 changed files with 331 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

316
data/plugin_vulns.xml
View File

File diff suppressed because it is too large Load Diff

16
data/wp_theme_vulns.xml
View File

@@ -18,10 +18,24 @@ You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
This file contains vulnerabilities associated with WordPress themes.
TYPE = ["SQLI", "MULTI", "REDIRECT", "RCE", "RFI", "LFI", "UPLOAD", "UNKNOWN", "XSS"]
TYPE = ["SQLI", "MULTI", "REDIRECT", "RCE", "RFI", "LFI", "UPLOAD", "UNKNOWN", "XSS", "FPD"]
-->
<themes>
<theme name="moneymasters">
<vulnerability>
<title>moneymasters Full Path Disclosure vulnerability</title>
<reference>http://1337day.com/exploit/20077</reference>
<type>FPD</type>
</vulnerability>
<vulnerability>
<title>moneymasters File Upload Vulnerability (metasploit)</title>
<reference>http://1337day.com/exploit/20076</reference>
<type>UPLOAD</type>
</vulnerability>
</theme>
<theme name="ovum">
<vulnerability>
<title>XSS vulnerability in Imediapixel premium WordPress themes</title>