CVE-2008-6492

CVE-2008-6492 describes an unrestricted file upload in process.php for the product “Tizag Countdown Creator 3.” An attacker can upload a file with an executable extension via index.php and then access the uploaded file in the pics/ directory to achieve remote code execution. Details note that som...

CVE-2008-6492

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

Search editor vulnerability-vulnerability warning-the black bar safety net

site:editor inurl:asp? id inurl:ewebeditornet Such as the common editor of the vulnerability are: ewebeditor ewebeditornet fckeditor editor southidceditor SouthidcEditor bigcneditor A:ewebeditor is an example 1:default download down the back: http://www.test.com/ewebeditor/adminlogin.asp Backgrou...

CVE-2008-6367

Unrestricted file upload vulnerability in Photos/createalbum.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in Memberimages/...

CVE-2008-6178

The CVE-2008-6178 issue is a vulnerability in FCKeditor 2.2’s editor/filemanager/browser/default/connectors/php/connector.php where FileUpload accepts a file with PHP content masquerading as an image (via a ZIP header) and stores it under UserFiles/File/, enabling remote code execution. Affected ...

CVE-2008-6178

Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploadin...

CVE-2009-0602

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2008-6084

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

MKPortal 1.2.1 XSS / SQL Injection / File Upload

waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html Description of vulnerable software...

Aj Classifieds Real Estate 3.0 - Arbitrary File Upload

AJClassifieds Realestate RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK,...

ThePortal 2.2 Arbitrary Remote File Upload Exploit

No description provided by source. web apps theportal2 v2.2 Auth bypass file upload -------------------- Author: siurek22 -------------------- You need curl to run it -------------------- Code: -------------------- upload.php ?php $file=$POST'url'; $fel=explode"\n", $file; $ile=count$fel;...

doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload

doop CMS 1.4.0b - Cross-Site Request Forgery Arbitrary File Upload -------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello ...

OneOrZero helpdesk 1.6.*. Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what...

OneOrZero helpdesk 1.6.x. - Arbitrary File Upload

OneOrZero helpdesk 1.6.x. - Arbitrary File Upload !/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does n...

CVE-2008-5677

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICSPATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the...

CVE-2008-5220

Unrestricted file upload vulnerability in admin/uploadform.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/...

getaphpsite Auto Dealers - Arbitrary File Upload

getaphpsite Auto Dealers - Arbitrary File Upload geta php cardealers Remote File upload ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 22.11.2008 Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

PHPStore PHP Job Search Script Remote File Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHPStore PHP Job Search Script Remote File Upload Vulnerability =============================================================== PHPStore Job Search Remote File Upload Author:...

bigdump-upload.txt

============================================================ !vuln BigDump ver. 0.29b Previous versions may also be affected. ============================================================ ============================================================ !risk Medium There are currently many websites...

CVE-2008-4878

The CVE-2008-4878 entry concerns WebCards 1.3, specifically the Add Image Macro feature. The vulnerability is an unrestricted file upload that enables remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension and then requesting the uploaded fi...