728 matches found
GLSA-200805-04 : eGroupWare: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200805-04 eGroupWare: Multiple vulnerabilities A vulnerability has been reported in FCKEditor due to the way that file uploads are handled in the file editor/filemanager/upload/php/upload.php when a filename has multiple file...
[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
CVE-2008-1993
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files...
CVE-2008-1993
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files...
CVE-2008-1993
CVE-2008-1993 affects Acidcat CMS 3.4.1 where the FCKEditor component is not access-restricted, enabling remote upload of arbitrary files. Based on the NVD entry, the flaw is exploitable over the network with low attack complexity and no authentication, potentially impacting confidentiality, inte...
CVE-2008-1993: Undefined Security Weakness
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files...
Acidcat CMS Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Description: Acidcat CMS is a web site and simple Conte...
Acidcat CMS 3.4.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================= Acidcat CMS 3.4.1 Multiple Remote Vulnerabilities ================================================= AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor:...
Fckeditor <=2.4.2 For php arbitrary Upload File vulnerability-vulnerability warning-the black bar safety net
Infos: Fckeditor =2.4.2 For php arbitrary file upload vulnerability Author: Maple-x Date: 18/12/2007 FCKeditor is a very good HTML online editor. In the processing PHP upload where there is a serious security vulnerability Cause the user can upload any file 在...
Fckeditor <=2.4.2 For php 任意上传文件漏洞
FCKeditor是一款非常优秀的HTML在线编辑器。在处理PHP上传的地方存在严重的安全漏洞 导致用户可以上传任意文件 在fckeditor/editor/filemanager/upload/php/upload.php 61行 程序从$GET数组中获取Type变量，然后通过inarray进行类型判断。 但在config配置文件中 并未对Media类型进行上传文件类型的控制，导致用户上传任意文件 Fckeditor =2.4.2 For php 更新到最新的2.5版本。或者在config.php文件中，添加对Media类型的文件类型限制...
[Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87
Software : eFileman Version : 7.x tested on 7.1.0.87-88 Found by : Xcross87 A. Remote File Upload Vulnerability : Xploit : http://victim.com/path/upload.html http://victim.com/path/cgi-bin/efileman/upload.cgi The uploaded files are stored in : http://victim.com/path/uploads/uploadfile.xxx B. Dire...
koreanghboard-multi.txt
Software : Korean GHBoard Site : http://www.ghlab.com/ Found by : Xcross87 1. File Upload Vulnerability Xploit : victim.com/ghboard/component/upload.jsp 2. FlashUpload component File Upload and File Download Vulnerability Upload Xploit : victim.com/ghboard/component/flashupload/upload.html Not...
efileman-multi.txt
Software : eFileman Version : 7.x tested on 7.1.0.87-88 Found by : Xcross87 A. Remote File Upload Vulnerability : Xploit : http://victim.com/path/upload.html http://victim.com/path/cgi-bin/efileman/upload.cgi The uploaded files are stored in : http://victim.com/path/uploads/uploadfile.xxx B. Dire...
CVE-2007-5156
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...
Design/Logic Flaw
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...
CVE-2007-5156
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...
CVE-2007-5156
An incomplete blacklist vulnerability exists in the FCKeditor component, specifically within the editor/filemanager/upload/php/upload.php file. This vulnerability affects products such as SiteX CMS 0.7.3.beta , La-Nai CMS , Syntax CMS , and Cardinal CMS . It allows remote attackers to upload and ...
CVE-2007-5156
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...
CVE-2007-5156
Removed by vendor...
waraxe-2007-SA057.txt
waraxe-2007-SA057 - Unauthorized File Upload in SiteX CMS ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-57.html Target software description:...