CVE-2008-6849

Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a via a link that is listed by userfiles/numbershell.php...

CVE-2009-2270

Unrestricted file upload vulnerability in member/uploadsedit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename...

Joomla Pinboard Remote File Upload

| | Joomla Component compinboard Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | | Dork inurl:compinboard | | Exploite : | | 1-target.com/path/components/compinboard/popup/popup.php?option=showupload | | or | |...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

Unrestricted file upload

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

Cheap corporate network V1. 0 vulnerability analysis-vulnerability warning-the black bar safety net

QQ:7 9 5 8 6 0 0 products. the asp part of the code % pages=1 0 leixing=lcasetrimrequest"id" select case leixing case "big" anclassid=request"anid" set rs=server. createobject"adodb. recordset" rs. open "select from sort1 where anclassid="&anclassid,conn,1,1 if rs. bof and rs. eof then response...

CVE-2008-6822

Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team NEPT imgupload aka Image Uploader 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, ...

CVE-2008-6822

The CVE-2008-6822 entry concerns the NEPT imgupload (Image Uploader) 1.0 product. A vulnerability in uploadp.php enables remote code execution via unrestricted file upload: an attacker uploads a file with an executable extension and a modified content type, and then accesses that file directly (d...

CVE-2008-6822

Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team NEPT imgupload aka Image Uploader 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, ...

CVE-2008-6814

Unrestricted file upload vulnerability in imageupload.php in the SimpleBoard comsimpleboard component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direc...

CVE-2009-1750

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2008-6811

Unrestricted file upload vulnerability in imageprocessing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2009-1663

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...

CVE-2009-1659

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...

CVE-2008-6785

Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file...

CVE-2008-6785

CVE-2008-6785 concerns an unrestricted file upload vulnerability in Mini File Host 1.5. An attacker could upload a file with an executable extension and access it directly to execute arbitrary code. The vulnerability is triggered by placing a crafted file (e.g., name.php) in an unspecified direct...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2009-1483

CVE-2009-1483 describes an unrestricted file upload in the Adam Patterson Studio Lounge Address Book 2.5 web app. The vulnerability exists in upload-file.php (reachable from index2.php) and allows an attacker to upload a file with an executable extension, then access it directly under profiles/ t...

CVE-2008-6768

CVE-2008-6768 concerns an unrestricted file upload vulnerability in the K&S Shopsoftware product, specifically in the admin/editor/images.php module. The issue arises when an attacker uploads a file with an executable extension, which can then be accessed via a direct request to the uploaded file...