43 matches found
CVE-2013-7102
Multiple unrestricted file upload vulnerabilities in 1 media-upload.php, 2 media-upload-lncthumb.php, and 3 media-upload-sqbutton.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extensio...
CVE-2008-7102
DotNetNuke 2.0–4.8.4 is affected by a skin-file security bypass vulnerability that lets remote attackers load .ascx files instead of skin files due to parameter-validation issues. Affected component: skin file handling; root cause: parameter validation weakness. Impact per sources: potential acce...
CVE-2006-7102
CVE-2006-7102 describes multiple PHP remote file inclusion vulnerabilities in the phpBurningPortal quiz-modul 1.0.1 (and possibly earlier) that allow remote attackers to execute arbitrary PHP code via a URL supplied to the lang_path parameter in one of three scripts: quest_delete.php, quest_edit....