CVE-2021-24171

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a "blocked" extension within another "blocked" extension in the "wcuffilename"...

SuperStoreFinder Plugins - Unauthenticated Arbitrary File Upload

The SuperStoreFinder premium WordPress plugins did not properly check file uploads, depending on the plugin, only checking for the mime type and/or the first extension of the file name. An attacker could set the Content-Type header to "Content-Type: text/csv", as well as use a double extension to...

Component GMapFP Unauthenticated Arbitrary File Upload Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A security vulnerability exists in the Joomla! component GMapFP. An attacker can exploit the vulnerability to access the application's upload functionality, upload files without authenticating the application, and bypass the issue by changi...

Quiz and Survey Master < 7.0.2 - Unauthenticated Arbitrary File Upload

Because the plugin doesn't validate the name of the uploaded file, an unauthenticated user could upload a PHP script with a double extension, e.g., script.php.jpg, and execute it on HTTP servers running a configuration such as Apache + PHP FastCGI. Edit WPScanTeam: This appears to be due to an...

Gym Management System 1.0 - Unauthenticated Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Gym Management System 1.0 - Unauthenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://projectworlds.in/ Software Link:...

CVE-2018-20129

An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/selectimagespost.php allows remote attackers to upload and execute arbitrary PHP code via a double extension and a modified ".php" substring, in conjunction with the image/jpeg content type, as demonstrated by the...

Micro Focus NetIQ Identity Manager Code Execution Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...

Design/Logic Flaw

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...

Unrestricted file upload

Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file...

Design/Logic Flaw

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

CVE-2017-7402

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

Unrestricted file upload

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors...

UBUNTU-CVE-2016-9187

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors...

CVE-2016-9187

CVE-2016-9187: Unrestricted file upload in Moodle 3.1.2 image module due to double-extension handling allows remote authenticated users to execute arbitrary code by uploading an executable and accessing it via an unspecified vector. Connected documents corroborate the vulnerability and indicate a...

WordPress Responsive Thumbnail Slider Plugin 1.0 - Arbitrary File Upload

WordPress插件 , Responsive Thumbnail Slider Plugin 1.0,任意文件上传。这个漏洞非常严重，涉及到很多WordPress主题。这个任意文件上传漏洞，不需要与管理员发生互动，而且不需要有管理员的权限，甚至不需要普通用户的账号密码，就能完成这个攻击。 For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And B...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link:...

WordPress Responsive Thumbnail Slider 1.0 Shell Upload

POC : For Exploiting This Vulnerability : Go To Add Image Section And Upload File By Self Plugin Uploader Then Upload File With Double Extension Image And By Using A BurpSuite Or Tamper Data Change The File Name From Shell.php.jpg To Shell.php And Shell Is Uploaded . :...

WordPress Plugin Responsive Thumbnail Slider 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Responsive Thumbnail Slider Arbitrary File Upload Date: 2015/8/29 Exploit Author: Arash Khazaei Vendor Homepage: https://wordpress.org/plugins/wp-responsive-thumbnail-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-responsive-thumbnail-slider.zip Version:...

CVE-2014-9521

Unrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4, when the allWPFiles query parameter is set, allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the...

Unrestricted file upload

Unrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4, when the allWPFiles query parameter is set, allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the...