RPL4rt

Inspirasi Yg Tinggi Membuatku Menjadi Hidup..

Home · Author · Portal · Versi Desktop · Twitter · About Us · Contact
Plugin Berbahaya Joomla & WordPress.docx

Plugin Berbahaya Joomla & WordPress

Plugin Berbahaya Joomla & WordPress | Seperti kita ketahui,banyak situs situs yang memakai CMS Joomla dan WordPress yang banyak terkena deface atau yang sering kita ketahui yaitu hack..
Bisa juga itu terdapat pada celah plugin yang kita install.. Jadi sebaiknya sebelum menginstall plugin aneh,lebih baik kita search dulu di google agar aman.. :D
Nih daftar Plugin Yang berbahaya.. :


Joomla :
  • !JoomlaComment 4.0 beta1
  • AWD Wall 1.5
  • BF Survey Pro
  • com_aclassf
  • com_agora
  • com_ajaxchat
  • com_album
  • com_alphauserpoints
  • com_artportal
  • com_booklibrary
  • com_cbresumebuilder
  • com_content
  • com_digifolio
  • com_djcatalog
  • com_facebook
  • com_fastball
  • com_foobla_suggestions
  • com_gameserver
  • com_groups
  • com_hbssearch
  • com_icrmbasic
  • com_idoblog
  • com_jabode
  • com_jbudgetsmagic
  • MusicGallery
  • milen Photo Gallery
  • Quick News
  • com_virtuemart
  • com_digistore
  • JvideoDirect
  • JEvent search plugin
  • Kunena
  • idoblog
  • ccnewsletter
  • Virtuemart 1.1.4
  • JBDiary
  • JbPublishDownFp
  • com_casino
  • Mochigames
  • JoomlaXML
  • JVClouds3D SWF module
  • perchagallery
  • econtentsite
  • Jvehicles
  • smestorage
  • JE Tooltip
  • Gift Exchange Beta
  • RokDownloads
  • AllVideos 3.1
  • communitypolls
  • Flash Magazine Deluxe
  • juliaportfolio
  • Scriptegrator
  • SqlReport
WordPress :
  • WordPress 2.8.1 (url) Remote Cross Site Scripting Exploit
  • WordPress Plugin My Category Order <= 2.8 SQL Injection Vulnerability
  • WordPress Privileges Unchecked in admin.php and Multiple Information
  • WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability
  • WordPress Plugin DM Albums 1.9.2 Remote File Disclosure Vulnerability
  • WordPress Plugin DM Albums 1.9.2 Remote File Inclusion Vuln
  • WordPress Plugin Photoracer 1.0 (id) SQL Injection
  • WordPress Plugin Lytebox (wp-lytebox) Local File Inclusion
  • WordPress Plugin fMoblog 2.1 (id) SQL Injection
  • WordPress MU < 2.7 ‘HOST’ HTTP Header XSS Vulnerability
  • WordPress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability
  • WordPress Plugin Page Flip Image Gallery <= 0.2.2 Remote FD Vuln
  • WordPress Plugin e-Commerce <= 3.4 Arbitrary File Upload Exploit
  • WordPress Media Holder (mediaHolder.php id) SQL Injection Vuln
  • WordPress Plugin st_newsletter (stnl_iframe.php) SQL Injection Vuln
  • WordPress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit
  • WordPress 2.6.1 SQL Column Truncation Vulnerability
  • WordPress Plugin Download Manager 0.2 Arbitrary File Upload Exploit
  • WordPress Plugin Spreadsheet <= 0.6 SQL Injection Vulnerability
  • WordPress Plugin Download (dl_id) SQL Injection Vulnerability
  • WordPress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities
  • WordPress Photo album Remote SQL Injection Vulnerability
  • WordPress Plugin Simple Forum 1.10-1.11 SQL Injection Vulnerability
  • WordPress Plugin Simple Forum 2.0-2.1 SQL Injection Vulnerability
  • WordPress MU < 1.3.2 active_plugins option Code Execution Exploit
  • WordPress Plugin st_newsletter Remote SQL Injection Vulnerability
  • WordPress Plugin Wordspew Remote SQL Injection Vulnerability
  • WordPress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
  • WordPress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit
  • WordPress Plugin Adserve 0.2 adclick.php SQL Injection Exploit
  • WordPress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability
  • WordPress Plugin WP-Cal 0.3 editevent.php SQL Injection Vulnerability
  • WordPress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability
  • WordPress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability
  • WordPress <= 2.3.1 Charset Remote SQL Injection Vulnerability
  • WordPress Plugin PictPress <= 0.91 Remote File Disclosure Vulnerability
  • WordPress Plugin BackUpWordPress <= 0.4.2b RFI Vulnerability
  • WordPress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)
  • WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit     21107 R
  • WordPress 2.2 (xmlrpc.php) Remote SQL Injection Exploit
  • WordPress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit
  • WordPress plugin myflash <= 1.00 (wppath) RFI Vulnerability
  • WordPress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
  • WordPress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability
  • WordPress Plugin myGallery <= 1.4b4 Remote File Inclusion Vulnerability
  • WordPress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
  • WordPress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit
  • WordPress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit
  • Enigma 2 WordPress Bridge (boarddir) Remote File Include
  • WordPress <= 2.0.2 (cache) Remote Shell Injection Exploit
  • WordPress <= 1.5.1.3 Remote Code Execution eXploit (metasploit)
  • WordPress <= 1.5.1.3 Remote Code Execution 0-Day Exploit
  • WordPress <= 1.5.1.2 xmlrpc Interface SQL Injection Exploit
  • WordPress <= 1.5.1.1 SQL Injection Exploit
  • WordPress <= 1.5.1.1 “add new admin” SQL Injection Exploit
  • WordPress Blog HTTP Splitting Vulnerability
  • Tweet Meme
Sekian list plugin yang berbahaya menurut tetangga sebelah , hehehe :D
Semoga bermanfaat.. :)

Belum ada komentar untuk "Plugin Berbahaya Joomla & WordPress"

Posting Komentar

Harap berkomentar sesuai dengan isi posting & komentar spam tidak akan ditampilkan.

Copyright © 2017 RPL4rt Powered by Blogger