CVE-2004-2690

Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...

CVE-2007-5231

Unrestricted file upload vulnerability in admin/uploadfiles.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230...

雅虎通CYFT ft60.dll ActiveX控件GetFile方式任意文件上传漏洞

BUGTRAQ ID: 25727 雅虎通是一款非常流行的即时通讯工具。 雅虎通的CYFT ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞向用户系统上传任意文件。 CYFT ActiveX控件的GetFile方式没有对用户提交的参数做充分的检查过滤，远程攻击者可以通过提供畸形参数向用户系统的任意位置上传任意文件，但是相关的控件默认情况下不能远程调用。 Yahoo! Messenger 8.1.421 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...

CVE-2007-4913

CVE-2007-4913 concerns Invision Power Board (IPB/IP.Board) 2.3.1 up to 20070912. The vulnerability lies in ips_kernel/class_upload.php, where remote attackers can upload arbitrary script files using crafted image filenames to the uploads/ directory. The uploaded files are saved with a .txt extens...

CVE-2007-4640

Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary PHP files in uploads/ via an Uploads action...

CVE-2007-4610

Unrestricted file upload vulnerability in config/upload.php in Moonware aka Dale Mooney Gallery allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php...

CVE-2007-4610

The CVE-2007-4610 issue affects Moonware (aka Dale Mooney Gallery). It is an unrestricted file upload vulnerability in config/upload.php that lets remote attackers upload and execute arbitrary PHP files in the images/ directory, with potential relation to config/admin.php. The entry states this a...

CVE-2007-4371

Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/...

CVE-2007-4182

CVE-2007-4182 describes an unrestricted file upload in WikiWebWeaver

CVE-2007-4057

Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary PHP code via a filename ending with 1 .php.gif, 2 .php.jpg, or 3 .php.png...

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

No description provided by source. ================================================================================================================ ++ Joomla Component Expose = RC35 Remote Permission Bypass/Arbitrary File Upload Vulnerability ++ ++...

CVE-2005-4855

Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3403

Unrestricted file upload vulnerability in upload.php in dreamLog aka dreamblog 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile parameter...

CVE-2007-3403

Unrestricted file upload vulnerability in upload.php in dreamLog aka dreamblog 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile parameter...

CVE-2007-3292

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article...

Unrestricted file upload

Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article...

CVE-2007-3292

CVE-2007-3292 : LiveCMS 3.4 and earlier is vulnerable to an unrestricted file upload, enabling remote attackers to upload and execute arbitrary PHP by submitting a PHP file as the image type for an article. Root cause: inadequate validation of the uploaded file type during image handling. Impact:...

Link Request Contact Form任意文件上传漏洞

Link Request Contact Form允许用户请求向其他站点添加自己站点的链接横幅。 Link Request Contact Form在处理文件上传时存在漏洞，远程攻击者可能利用此漏洞上传恶意脚本执行代码。 Link Request Contact Form的output.php脚本没有验证所上传文件的扩展名，因此攻击者可以上传有.php扩展名的文件然后在服务器上执行任意PHP代码。成功攻击要求在HTTP头中传送允许的MIME媒体类型。 American Financing Link Request Contact Form 3.4 American Financing...