Mobile USB Drive HD - Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/60847/info Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before uploading them. An attacker can exploit these issues to upload arbitrary files onto the w...

WordPress Plugin Front File Manager 0.1 - Arbitrary File Upload

WordPress Plugin Front File Manager 0.1 - Arbitrary File Upload Exploit Title: Wordpress front file manager 0.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-file-manager/ Date: 07/06/2012 Exploit Author: Adrien Thierry adrien dot thierryfr at gmail dot com Vendor Homepage:...

Zubrag.com File Upload Form Shell Upload

Exploit Title: File Upload Form File Arbitrary Upload Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: File Upload Form http://www.zubrag.com/scripts/file-upload-form.php Tested on: Linux Comment Greetz: Hern...

V-CMS 1.0 Shell Upload

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Window...

InduSoft Web Studio Arbitrary Upload Remote Code Execution

This module exploits a lack of authentication and authorization on the InduSoft Web Studio Remote Agent, that allows a remote attacker to write arbitrary files to the filesystem, by abusing the functions provided by the software. The module uses the Windows Management Instrumentation service to...

NoticeBoardPro 1.0 multiple defects and repair-vulnerability warning-the black bar safety net

------------------------------------------------------------------------ Software................ NoticeBoardPro 1.0 Vulnerability........... SQL Injection Threat Level............ Critical 4/5 Download................ http://www. NoticeBoardPro. com/ Discovery Date.......... 5/11/2011 Tested...

NoticeBoardPro 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.co...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

NoticeBoardPro 1.0 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery Date..........5/11/2011 Tested...

phpWebSite 1.7.1 - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/47759/info phpWebSite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code an...

Exponent 2.0.0 Beta 1.1 Shell Upload

------------------------------------------------------------------------ Software................Exponent 2.0.0 beta 1.1 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.exponentcms.org/ Discovery Date..........5/4/2011 Tested...

phpWebSite 1.7.1 - upload.php Arbitrary File Upload

phpWebSite 1.7.1 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/47759/info phpWebSite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...

Time And Expense Management System Shell Upload

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://sourceforge.net/projects/tems/ Discovery...

Time and Expense Management System - Multiple Vulnerabilities

Time and Expense Management System - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...

Time and Expense Management System - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5 Download................http://sourceforge.net/projects/tems/ Discovery...

Time and Expense Management System Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...

FengOffice 1.7.4 Shell Upload

------------------------------------------------------------------------ Software................FengOffice 1.7.4 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.fengoffice.com Vendor Contact Date.....3/11/2011 Disclosure...

ClanSphere 2010.3 / CKEditor Shell Upload

------------------------------------------------------------------------ Software................ClanSphere 2010.3 / CKEditor Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.csphere.eu/ Vendor Contact Date.....3/10/2011...

Element-IT PowUpload 1.3 File Arbitrary Upload

Exploit for asp platform in category web applications Exploit Title: Element-IT PowUpload 1.3 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Element-IT PowUpload 1.3 Software Link:...

EAFlashUpload v 2.5 File Arbitrary Upload

Exploit for asp platform in category web applications Exploit Title: EAFlashUpload v 2.5 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: EAFlashUpload v 2.5 Software Link:...