4216 matches found
CVE-2020-17462
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798...
Design/Logic Flaw
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798...
CVE-2020-17462
CMS Made Simple 2.2.14 is affected by an authenticated arbitrary file upload vulnerability in the File Manager due to not blocking .ptar files, a related issue to CVE-2017-16798. Multiple sources (NVD/CVE records, OpenVAS listing) note the issue affects 2.2.14 and, per OpenVAS, also 2.2.15 and ea...
CVE-2020-17462
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798...
CVE-2020-17462: Unrestricted Upload of File with Dangerous Type
CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798...
PT-2020-15005
Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.14 Description The issue allows authenticated arbitrary file upload due to the File Manager not blocking .ptar files. Recommendations For CMS Made Simple version 2.2.14, update to a newer version that contains a fix...
CMS Made Simple 2.2.14 Shell Upload
Exploit Title: CMS Made Simple 2.2.14 - Arbitrary File Upload Authenticated Google Dork: - Date: 2020-07-29 Exploit Author: Roel van Beurden Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/14793/cmsms-2.2.14-install.zip Version: 2.2.14 Tested...
CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: CMS Made Simple 2.2.14 - Arbitrary File Upload Authenticated Exploit Author: Roel van Beurden Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/14793/cmsms-2.2.14-install.zip...
CMS Made Simple 2.2.14 - Authenticated Arbitrary File Upload
Exploit Title: CMS Made Simple 2.2.14 - Arbitrary File Upload Authenticated Google Dork: - Date: 2020-07-29 Exploit Author: Roel van Beurden Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/14793/cmsms-2.2.14-install.zip Version: 2.2.14 Tested...
File Manager < 6.5 - Backup File Directory Listing
The File Manager WordPress plugin could expose backup files if the web server had Directory Listing enabled. The File Manager WordPress plugin, version 6.4 and lower, failed to restrict external access to the fmbackups directory with a .htaccess file. This resulted in the ability for...
File Manager < 6.5 - Backup File Directory Listing
The File Manager WordPress plugin could expose backup files if the web server had Directory Listing enabled. The File Manager WordPress plugin, version 6.4 and lower, failed to restrict external access to the fmbackups directory with a .htaccess file. This resulted in the ability for...
fly-fm File Manager Confidential Data Access
The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
fly-fm Resource Leak Confidential Data
The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...
fly-fm File Manager Path Traversal
The vulnerability of the fly-fm file manager exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential data...
fly-fm File Manager DoS
The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...
PT-2020-5109
Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 10.0.3 and earlier Description The issue is related to an out-of-bounds write vulnerability in the file manager. Successful exploitation could lead to arbitrary code execution, allowing a remote attacker to execute code i...
PT-2020-5096
Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 10.0.3 and earlier Description The issue is related to an out-of-bounds read in the memory buffer of Adobe Bridge's file manager. Successful exploitation could lead to arbitrary code execution, allowing a remote attacker ...
PT-2020-22861
Уязвимость менеджера файлов fly-fm связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным и нарушить их целостность...
Adobe Bridge Heap Buffer Overflow RCE
The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...
Neon LMS Shell Upload
This Metasploit module exploits a shell upload vulnerability in Neon LMS versions prior to 4.9.1. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require "net/http" require "uri" require 'nokogiri'...