Joomla Media Manager File Upload Vulnerability

This Metasploit module exploits a vulnerability found in Joomla 2.5.x up to 2.5.13, as well as 3.x up to 3.1.4 versions. The vulnerability exists in the Media Manager component, which comes by default in Joomla, allowing arbitrary file uploads, and results in arbitrary code execution. The module...

Directory traversal

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. dot dot in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files...

webpa 1.1.0.1 - Multiple Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-23 WebPA fail'; fputs$fp, $headers; return $fp; function httprecv$fp $ret=""; while !feof$fp $ret.= fgets$fp, 1024;...

VulnCheck KEV: CVE-2012-10064

Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticated uploads without enforcing safe file type restrictions,...

CMS Balitbang 3.42 Fckeditor Arbitrary File Uploads Exploit

Exploit for php platform in category web applications Author : thecybernuxbie Home : www.nuxbie.zuzzeta.us E-mail : email protected Found : 06 April 2011. Version: CMS Balitbang 3.42. Tested : Windows 7 Ultimate 32bit. Link : http://www.kajianwebsite.org/download/CMS%203.42-17082010.rar ! Dork :...

PHP Advanced Transfer Manager 1.10 - Arbitrary File Upload

======================================================================================== | Title : PHP Advanced Transfer Manager v1.10 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by PHP Advanced Transfer Manager v1.10 - @2002 Bugada Andrea |...

Maxs Image Uploader - Arbitrary File Upload

Maxs Image Uploader - Arbitrary File Upload ======================================================================================== | Title : Max's Image Uploader Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

Saibal Download Area 2.0 - Arbitrary File Upload

Saibal Download Area 2.0 - Arbitrary File Upload ======================================================================================== | Title : SAIBAL DOWNLOAD AREA V.2.0 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum ...

Flashden - Multiple Arbitrary File Uploads

Flashden - Multiple Arbitrary File Uploads Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files...

Flashden - Multiple Arbitrary File Uploads

Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files Your Shell And Upload. Shell: /test/shell.p...

Adobe RoboHelp Server Security Bypass (APSA09-05 / intrusive check)

The version of RoboHelp Server running on the remote host has a security bypass vulnerability. Arbitrary files can be uploaded to the web server by using a specially crafted POST request. Uploading a JSP file can result in command execution as SYSTEM. %NASLMINLEVEL 70300 C Tenable Network Securit...

openSUSE 10 Security Update : opera (opera-5028)

This is a version update for Opera to version 9.26 to fix : - Fixed an issue where simulated text inputs could trick users into uploading arbitrary files, as reported by Mozilla. - Image properties can no longer be used to execute scripts, as reported by Max Leonov. - Fixed an issue where the...

joomlauhp-upload.txt

joomla upload php code or picture comuhp AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorK 1 : allinurl:"index.php?option=comuhp" DORK 2 : allinurl:"component/option,comuhp" EXPLOIT : index.php?option=comuhp&task=upload&id=S@BUN and upload php code or upload your picture you can see php or p...

PT-2006-3389 · Dubanner · Dubanner

Name of the Vulnerable Software and Affected Versions: DUbanner version 3.1 Description: The issue allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, to the add.asp endpoint, probably due to client-side enforcement that can be...

Cross site scripting

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

SEC-20051107-0.txt

SEC-CONSULT Security Advisory 20051107-0 ============================================================================= title: toendaCMS multiple vulnerabilites program: toendaCMS vulnerable version: .xml, where is string composed of 5 bytes e.g. 2ac336ff0d.xml. Each XML file contains username...

[Full-disclosure] SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites

SEC-CONSULT Security Advisory 20051107-0 ============================================================================= title: toendaCMS multiple vulnerabilites program: toendaCMS vulnerable version: 0.6.2 homepage: www.toenda.com found: 2005-10-25 by: Bernhard Mueller / SEC-CONSULT /...

paFileDB <= 3.1 Multiple Vulnerabilities (2)

The remote host is running a version of paFileDB that is prone to a wide variety of vulnerabilities, including arbitrary file uploads, local file inclusion, SQL injection, and cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

JBrowser 1.0/2.x - Unauthorized Admin Access

source: https://www.securityfocus.com/bid/9537/info Due to a lack of access validation to the 'admin' directory, malevolent users may be able to execute arbitrary admin scripts. This may allow a malicious user to upload arbitrary files to the affected system and gain access to files outside of th...

Microsoft IIS repost.asp File Upload

The script '/scripts/repost.asp' is installed on the remote IIS web server and allows an attacker to upload arbitrary files to the '/Users' directory if it has not been configured properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Securit...