CVE-2011-1329

WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file...

PT-2011-3060

Name of the Vulnerable Software and Affected Versions WalRack versions 1.x through 1.1.8 WalRack versions 2.x through 2.0.6 Description The issue allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, such as a .php.zzz file, due to improper restriction of...

CVE-2011-1329: Undefined Security Weakness

WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file...

CVE-2009-4818

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif...

CVE-2009-4819: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitrary code by uploading a file with a 1 .php.pgif or 2 .php.pjpeg double extension, then accessing it via a direct request to the file in albums/userpics/...

DEDECMS v5. 5 Final select_soft_post.php vulnerability-vulnerability warning-the black bar safety net

Author:st0p Today only from Wolves Security Team to see toby57 large cattle released"DEDECMS v5. 5 GBK Final one. vulnerability"this article,the original address:http://bbs.wolvez.org/topic/125/ Your own local testing a bit,covering the SESSION this little chicken threat is true,because the reque...

RunCMS 1.6.3 Shell Injection

!/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org ------------------------------ Discovered o...

RunCMS <= 1.6.3 (double ext) Remote Shell Injection Exploit

No description provided by source. !/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org...

RunCMS 1.6.3 - Remote Shell Injection

RunCMS 1.6.3 - Remote Shell Injection !/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org...

RunCMS 1.6.3 - Remote Shell Injection

!/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org ------------------------------ Discovered o...

CVE-2009-2270

Unrestricted file upload vulnerability in member/uploadsedit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename...

CVE-2009-2270: Improper Control of Generation of Code

Unrestricted file upload vulnerability in member/uploadsedit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename...

EggBlog 4.1.1 - Local Directory Traversal

EggBlog 4.1.1 - Local Directory Traversal !/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig;...

EggBlog 4.1.1 - Local Directory Traversal

!/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig; for my $i=0;$i=scalar@director;$i++ print $director$i."\n";...

CVE-2007-6479

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...

Unrestricted file upload

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...

CVE-2007-6479: Undefined Security Weakness

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...

Unrestricted file upload

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...

CVE-2007-5733: Improper Input Validation

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...