Lucene search
+L

213 matches found

NVD
NVD
•added 2014/05/23 2:55 p.m.•21 views

CVE-2013-1668

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file...

8.5CVSS7.4AI score0.06977EPSS
SaveExploits5References7
Prion
Prion
•added 2014/05/23 2:55 p.m.•28 views

Design/Logic Flaw

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file...

8.5CVSS8AI score0.06977EPSS
SaveExploits5References7Affected Software1
CVE
CVE
•added 2014/05/23 2:00 p.m.•66 views

CVE-2013-1668

CVE-2013-1668: CosCMS

8.5CVSS7.5AI score0.06977EPSS
SaveExploits5References7Affected Software1
Cvelist
Cvelist
•added 2014/05/23 2:00 p.m.•40 views

CVE-2013-1668

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file...

7.4AI score0.06977EPSS
SaveExploits5References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/23 12:00 a.m.•3 views

CVE-2013-1668: Improper Neutralization of Special Elements used in an OS Command

The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file...

8.5CVSS6.4AI score0.06977EPSS
SaveExploits5References2
seebug.org
seebug.org
•added 2013/12/19 12:00 a.m.•20 views

MetInfo 5.1 /feedback/uploadfile_save.php 后门漏洞

No description provided by source...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/11 12:00 a.m.•2 views

CVE-2013-2580: Undefined Security Weakness

Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file ...

7.1CVSS6AI score0.03536EPSS
SaveExploits6References1
exploitpack
exploitpack
•added 2012/06/12 12:00 a.m.•45 views

XOOPS Cube PROJECT FileManager - xupload.php Arbitrary File Upload

XOOPS Cube PROJECT FileManager - xupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53945/info FileManager is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An...

0.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2012/06/06 12:00 a.m.•21 views

WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload

WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins :...

0.5AI score
SaveExploits0
zdt
zdt
•added 2012/06/05 12:00 a.m.•39 views

Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wordpress-member-private-conversation/ Plugins :...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2011/12/27 2:00 a.m.•41 views

CVE-2011-4167

Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp...

7.8AI score0.06758EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/12/27 12:00 a.m.•2 views

CVE-2011-4167: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp...

7.5CVSS6.8AI score0.06758EPSS
SaveExploits0References2
myhack58
myhack58
•added 2009/11/18 12:00 a.m.•18 views

Network Information release system(WRMPS)through the kill 0day-vulnerability warning-the black bar safety net

Pass to kill,kill official Search:Powered By WRMPS 1. Registration-column directory Plus/UpLoad/uploadfile. asp? Type=1&User=1&dir=...././/..../.// data Plus/UpLoad/uploadfile. asp? Type=1&User=1&dir=...././/..../.// admin This use is not greater than ,the password only the MD5 in the top ten,2B...

0.3AI score
SaveExploits0
Rows per page
Query Builder