PHP rfc1867.c $_FILES Array Crafted MIME Header Arbitrary File Upload

The remote host is running a version of PHP that is older than 4.3.9 or 5.0.2. The remote version of this software is affected by an unspecified file upload vulnerability that could allow a local attacker to upload arbitrary files to the server. This flaw can only be exploited locally...

Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload / Execution

source: https://www.securityfocus.com/bid/10174/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running th...

CVE-2003-1501

Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. dot dot in the reqfile parameter...

php67.txt

Informations : °°°°°°°°°°°°° Language : PHP Version : 6.7 Website : http://www.phpnuke.org Problem : File Upload PHP Code/Location : °°°°°°°°°°°°°°°°°°° modules/WebMail/mailattach.php :...

CVE-2003-0482

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using filenew.php, then directly accessing the uploaded code via a request to the repository containing the code...

Microsoft Windows Media Player directory traversal

Directory traversal during .wmz files download allows to uploading any file to any location...

CVE-2002-1460

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...

PT-2002-2563 · Nola · Nola

Name of the Vulnerable Software and Affected Versions: NOLA versions 1.1.1 through 1.1.2 Description: The document management module does not restrict the types of files that are uploaded, allowing remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...

CVE-2002-1038

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...

DHTML Edit Control for IE5 allows local files to be uploaded to web server

Overview A vulnerability exists in the DHTML Edit Control for IE5 that allows arbitrary local files to be uploaded to a web server. Description DHTML Edit is an activex control that is marked safe-for-scripting. This control can be embedded in a website, and permit local files to be remotely...

CVE-2002-1038

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...

CVE-2002-1038

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...

move_uploaded_file breaks safe_mode restrictions in PHP

Hey Its possible to circumvent probadly spelled wrong PHP safemode restrictions by using moveuploadedfile. You take this nasty script and you have domain whatever.com and your directory path is /domains/whatever.com/ ? $file = $HTTPPOSTFILES'file''name'; $type = $HTTPPOSTFILES'file''type'; $size ...

CVE-2001-1112

Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters...

Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (2)

source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other sensitive administrative scripts...

Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (1)

source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other sensitive administrative scripts...

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass (2)

Cobalt RaQ 2.03.04.0 XTR - MultiFileUpload.php Authentication Bypass 2 source: https://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently...

CVE-2001-0437

uploadfile.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to uploadfile...

ArGoSoft 1.2.2.2 *.lnk upload Directory Traversal

ArGoSoft 1.2.2.2 .lnk upload Directory Traversal AFFECTED SYSTEMS ArGoSoft 1.2.2.2 DESCRIPTION ArGoSoft also has the .lnk upload directory traversal vulnerability : PUT local.lnk remote.lnk. IMPACT users with write permissions can traverse directories, by uploading a lnk file pointing to the...

CVE-2001-0437

CVE-2001-0437 affects DCForum 2000 1.0: the upload_file.pl handler allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file. This enables potential unauthorized file upload and abuse on affected installations. Public references corroborat...