bigdump-upload.txt

============================================================ !vuln BigDump ver. 0.29b Previous versions may also be affected. ============================================================ ============================================================ !risk Medium There are currently many websites...

CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4878

The CVE-2008-4878 entry concerns WebCards 1.3, specifically the Add Image Macro feature. The vulnerability is an unrestricted file upload that enables remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension and then requesting the uploaded fi...

CVE-2008-4767

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

CVE-2008-4767

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

NEPT Image Uploader 1.0 - Arbitrary File Upload

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

CVE-2008-4428

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory...

CVE-2008-4366

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/uplo...

Sports Clubs Web Panel 0.0.1 - Arbitrary File Upload

--==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered By: Stack + Discovered On: 11 Sep 2008 + Download:...

Kim Websites 1.0 (fckeditor) Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Kim Websites 1.0 fckeditor Remote Arbitrary File Upload Vulnerability ======================================================================= - Vulnerability: +--...

CVE-2008-3742

CVE-2008-3742 affects Drupal’s BlogAPI module in Drupal 5.x (before 5.10) and 6.x (before 6.4). The vulnerability is an unrestricted file upload where an authenticated user can upload a file with an executable extension that is not validated, enabling arbitrary code execution. OpenVAS/Fedora advi...

CVE-2008-3362

CVE-2008-3362 affects the WordPress Download Manager plugin (version 0.2) distributing an unrestricted file upload in upload.php. An attacker can upload a file with an executable extension via the upfile parameter and then access it at wp-content/plugins/downloads-manager/upload/ to execute arbit...

CVE-2008-3178

Unrestricted file upload vulnerability in uploadpictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

CVE-2008-3181

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

CVE-2008-3117

Unrestricted file upload in update_profile.php on PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file disguised as image content types (image/gif, image/jpeg, or image/pjpeg) and then accessing it via a direct request to the file under pi...

CVE-2008-3093

The CVE-2008-3093 issue affects ImperialBB 2.3.5 and earlier, where an unrestricted file upload flaw in the Upload_Avatar parameter allows remote authenticated users to upload and execute arbitrary PHP code by sending a .php filename with image/gif content type. Documents corroborate this configu...

CVE-2008-3001

CVE-2008-3001 affects Drupal’s Aggregation module (5.x) prior to 5.x-4.4. A crafted feed enables uploading files with arbitrary extensions, which could lead to remote code execution. Impact is described as remote attacker access with potentially complete compromise. A patch is available in 5.x-4....

CVE-2008-2988

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/...

Page Manager CMS Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications =========================================================== Page Manager CMS Remote Arbitrary File Upload Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | |||||||||...