5508 matches found
Secure Item Hub 1.0 XSS / Code Execution / File Upload
Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...
we7cms file upload vulnerability
we7cms is a content management system based on asp.net development. we7cms V3.0 system file upload vulnerability, the vulnerability is mainly caused by information leakage of the background upload service exposure, the uploaded service failed to get the identity verification, and the file format...
Unrestricted file upload
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors...
FCKeditor 2.6 /fckeditor/editor/filemanager/connectors/uploadtest.html 文件上传漏洞
No description provided by source...
用友ICC系统 任意文件上传漏洞
ZoomEye 探测结果显示，以下厂商均受该漏洞影响 中国地保险 中国保险在线客服 中国银网络客户服务 国基金管理有限公司 银行信用卡职能客服 人寿在线客服 同全球在线客服 中国联在线客服 上海信 山网络 娱网在线客服 顺游戏客户服务系统 官方商城在线客服...
大汉jcms /lm/sys/opr_uploadimg.jsp 文件上传漏洞
No description provided by source...
Multiple Vulnerabilities in the Integrated Management System of AnPulse Technology
An Pulse Technology Integrated Management System is a set of educational management software. The system is vulnerable to arbitrary file upload, arbitrary file inclusion, and multiple editor vulnerabilities. An attacker can exploit the vulnerabilities to gain remote control of the web server host...
Unrestricted file upload
Unrestricted file upload vulnerability in mods/core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the...
Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload Version 2
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'nokogiri' class Metasploit4 'Idera Up.Time Monitoring Station 7.4 post2file.php Arbitrary File Upload', 'Description' = %q This module exploit...
CVE-2015-8105
Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability found within the Up.Time monitoring server 7.2 and below. A malicious entity can upload a PHP file into the webroot without authentication, leading to arbitrary code execution. Although the vendor fixed Up.Time to prevent this...
SolarWinds Storage Manager File Upload and Execution Vulnerability
SolarWinds Storage Manager is a Web page-based storage management product with integrated storage monitoring, reporting, alerting and predictive analytics. A security vulnerability exists in the ProcessFileUpload.jsp file in SolarWinds Storage Manager. A remote attacker can exploit this...
用友某集团平台存在设计缺陷可任意删除文件致系统崩溃
简要描述： 任意删除文件 详细说明： 目标系统：http://ufsdp.ufida.com/ 因为系统的logo被我测试时删除了，所以界面看起来有点丑 这一切都源于扫描器发现的一个文件 http://ufsdp.ufida.com/UploadFile.aspx 漏洞证明： UploadFile.aspx经过测试没法上传shell，但是我发现上传后，会出现已上传文件的列表，以及删除文件的X 即访问如下链接就可以达到删除logo的目的 http://ufsdp.ufida.com/UploadFile.aspx?d=../../Images/logo.gif 所以，如果访问...
ManageEngine ServiceDesk Plus Arbitrary File Upload Exploit
This Metasploit module exploits a file upload vulnerability in ManageEngine ServiceDesk Plus. The vulnerability exists in the FileUploader servlet which accepts unauthenticated file uploads. This Metasploit module has been tested successfully on versions v9 b9000 - b9102 in Windows and Linux. The...
Serendipity Incomplete Blacklisting Vulnerability
Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. An incomplete blacklist vulnerability exists in the 'serendipityisActiveFile' function in the include/functionsimages.inc.php script in...
Synology Download Station Cross-Site Scripting Vulnerability
Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via file upload' feature of Synology Download Station prior to version 3.5-2962, which can be exploited to inject arbitrary web script or...
FineCms 免费版任意文件上传漏洞
路径：dayrui/libraries/Chart/ofcuploadimage.php $defaultpath = '../tmp-upload-images/'; if !fileexists$defaultpath mkdir$defaultpath, 0777, true; $destination = $defaultpath . basename $GET 'name' ; echo 'Saving your image to: '. $destination; $jfh = fopen$destination, 'w' or die"can't open file";...
FTP ftpchk3.php File Upload
A file upload vulnerability has been reported in FTP servers. The uploaded file is ftpchk3.php which contains a virus. This virus changes all web files, PHP, HTML, Javascript and TPL files in CMS systems to add a malicious script into the site. Successful exploitation of this vulnerability could...
WordPress Shopping Cart 3.0.4 --任意文件上传
受影响版本: WordPress Shopping Cart 3.0.4 日期: 29-10-2014 软件链接: https://wordpress.org/plugins/wp-easycart/ CVE: CVE-2014-9308 类别: 应用程序漏洞详情：任何注册用户都可以上传任何文件。上传点: wp-easycart\inc\amfphp\administration\banneruploaderscript.php$date = $POST'datemd5';$usersqlquery = sprintf"SELECT ecuser., ecrole.adminaccess...