CVE-2002-1038

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...

move_uploaded_file breaks safe_mode restrictions in PHP

Hey Its possible to circumvent probadly spelled wrong PHP safemode restrictions by using moveuploadedfile. You take this nasty script and you have domain whatever.com and your directory path is /domains/whatever.com/ ? $file = $HTTPPOSTFILES'file''name'; $type = $HTTPPOSTFILES'file''type'; $size ...

CVE-2001-1112

Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (2)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 2 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (2)

source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other sensitive administrative scripts...

Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (1)

source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other sensitive administrative scripts...

CVE-2001-0437

uploadfile.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to uploadfile...

ArGoSoft 1.2.2.2 *.lnk upload Directory Traversal

ArGoSoft 1.2.2.2 .lnk upload Directory Traversal AFFECTED SYSTEMS ArGoSoft 1.2.2.2 DESCRIPTION ArGoSoft also has the .lnk upload directory traversal vulnerability : PUT local.lnk remote.lnk. IMPACT users with write permissions can traverse directories, by uploading a lnk file pointing to the...

CVE-2001-0437

CVE-2001-0437 affects DCForum 2000 1.0: the upload_file.pl handler allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file. This enables potential unauthorized file upload and abuse on affected installations. Public references corroborat...

CVE-2001-0089

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability...

Unify eWave ServletExec 3.0C UploadServlet Unprivileged File Upload

ServletExec has a servlet called 'UploadServlet' in its server side classes. UploadServlet, when invokable, allows an attacker to upload any file to any directory on the server. The uploaded file may have code that can later be executed on the server, leading to remote command execution...

Exploit Code for File Input field advisory.

I have coded an exploit example for the "File Upload via Form" vulnerability recently mentioned by Microsoft Security. Here's the source for it well, most of the source. If you would like the whole source, email me. I'll send it as an attachment. --------------snip------------------ !script...

Security Bulletin (MS00-093)

Microsoft Security Bulletin MS00-093 Patch Available for "Browser Print Template" and "File Upload via Form" Vulnerabilities Originally posted: December 01, 2000 Summary Microsoft has released a patch that eliminates four security vulnerabilities in Microsoft® Internet Explorer: The “Browser Prin...

Microsoft Internet Explorer 5 - INPUT TYPEFILE Remote File Upload

Microsoft Internet Explorer 5 - INPUT TYPEFILE Remote File Upload font size="3" color="white...

PHP File Upload Capability Hidden Form Field Modification Arbitrary File Access

A version of PHP that is older than 3.0.17 or 4.0.3 is running on this host. If a PHP service that allows users to upload files and then display their content is running on this host, an attacker may be able to read arbitrary files from the server. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2000-0435

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...

CVE-2000-0435

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...

CVE-1999-0489

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To...

CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...