5553 matches found
Joomla Component Expose <= RC35 Remote File Upload Vulnerability
No description provided by source. ================================================================================================================ ++ Joomla Component Expose = RC35 Remote Permission Bypass/Arbitrary File Upload Vulnerability ++ ++...
CVE-2005-4855
Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...
Unrestricted file upload
Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...
CVE-2007-3432
Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...
CVE-2007-3403
Unrestricted file upload vulnerability in upload.php in dreamLog aka dreamblog 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile parameter...
CVE-2007-3403
Unrestricted file upload vulnerability in upload.php in dreamLog aka dreamblog 0.5 allows remote attackers to upload and execute arbitrary PHP code in uploads/images/ via the uploadedFile parameter...
Unrestricted file upload
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article...
CVE-2007-3292
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article...
CVE-2007-3292
CVE-2007-3292 : LiveCMS 3.4 and earlier is vulnerable to an unrestricted file upload, enabling remote attackers to upload and execute arbitrary PHP by submitting a PHP file as the image type for an article. Root cause: inadequate validation of the uploaded file type during image handling. Impact:...
Link Request Contact Form任意文件上传漏洞
Link Request Contact Form允许用户请求向其他站点添加自己站点的链接横幅。 Link Request Contact Form在处理文件上传时存在漏洞，远程攻击者可能利用此漏洞上传恶意脚本执行代码。 Link Request Contact Form的output.php脚本没有验证所上传文件的扩展名，因此攻击者可以上传有.php扩展名的文件然后在服务器上执行任意PHP代码。成功攻击要求在HTTP头中传送允许的MIME媒体类型。 American Financing Link Request Contact Form 3.4 American Financing...
CVE-2007-3199
The CVE-2007-3199 entry describes an unrestricted file upload vulnerability in the Link Request Contact Form 3.4 that allows remote attackers to execute arbitrary PHP code by uploading a file with a “.php” extension while using an image content type (e.g., image/jpeg). Documented impact is execut...
CVE-2007-3163
Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attackers to upload arbitrary .php files via an alternate data stream syntax, as demonstrated by .php::$DATA filenames, a related issue to CVE-2006-0658...
CVE-2007-2961
CVE-2007-2961 concerns an Unrestricted file upload vulnerability in FileCloset before 1.1.5. The issue allows remote attackers to upload arbitrary PHP files via unspecified vectors. The NVD entry records a CVSSv2 base score of 7.5 (HIGH) with network attack vector and no authentication required; ...
CVE-2007-2769
CVE-2007-2769 affects BES prior to 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1. The issue arises from improper handling of compressed files, enabling remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file. No further details on exploit methods or fixed...
Common Vulnerabilities and using a method and repair program Summary BY Alang-vulnerability warning-the black bar safety net
Common Vulnerabilities and using a method and repair program Summary BY Alang 1. Dust the edge of the ya border graphic systems v3. 0 build 2 0 0 3 0 1 2 3 in in v0. 4 5 You can also. Vulnerability page: createasp. asp and lastnewsxp. asp By injecting landing background, published an article in t...
CVE-2007-2630
The CVE-2007-2630 entry concerns an Incomplete blacklist vulnerability in the FCKeditor module’s filemanager/browse paths (config.php) used by ActiveCampaign 1-2-All (12All) versions 4.50–4.53.13. The issue allows remote authenticated administrators to upload and possibly execute .php4/.php5 file...
CVE-2007-2024
Unrestricted file upload vulnerability in the UpLoad feature lib/plugin/UpLoad.php in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a 1 php3, 2 php4, or 3 php5 extension...
CVE-2007-2025
CVE-2007-2025 : PhpWiki 1.3.11p1’s UpLoad feature (lib/plugin/UpLoad.php) allows unrestricted file uploads due to insufficient file-name validation. An attacker can upload a PHP file with a double extension (e.g., .php.3), which Apache may execute, leading to remote code execution. Remediation in...
CVE-2007-2025
Unrestricted file upload vulnerability in the UpLoad feature lib/plugin/UpLoad.php in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file...