Citrix XenMobile Server Unauthenticated File Upload Vulnerability

Citrix XenMobile Server is a mobility management solution. The solution is able to manage mobile devices, set mobile policies and compliance rules, gain insight into mobile mobile network operations, and more. A security vulnerability exists in Citrix XenMobile Server. An attacker could exploit t...

WordPress Plugin Peugeot Music - Arbitrary File Upload

Exploit Title: Wordpress Plugin Peugeot Music - Arbitrary File Upload Google Dork: inurl:/wp-content/plugins/peugeot-music-plugin/ Date: 2018-05-23 Exploit Author: Mr.7z Vendor Homepage: - Software Link: - Version: 1.0 Tested on: Windows 10 64bit Home Edition Exploit:...

CVE-2017-2617

hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed...

CVE-2018-1147

In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote authenticated attacker could create and upload a .nessus file, which may be viewed by an administrator allowing for the execution of arbitrary script code in a user's browser session. In other scenarios,...

CVE-2018-10760

CVE-2018-10760 describes an unrestricted file upload vulnerability in ProjectPier's Files plugin (versions 0.88 and earlier). The issue allows remote authenticated users to upload a file with an executable extension and then access it via a direct request to the file in the tmp directory under th...

CVE-2018-11098

CVE-2018-11098 affects Frog CMS 0.9.5. A file-upload vulnerability exists at the admin/?/plugin/file_manager/upload URI, described as a vulnerability similar to CVE-2014-4912. Connected documents reiterate an arbitrary file-upload issue in Frog CMS 0.9.5. No explicit patch/version remediation is ...

Frog CMS File Upload Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A security vulnerability exists in Frog CMS version 0.9.5. An attacker can exploit the vulnerability wit...

CVE-2018-0568

Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated users to execute arbitrary PHP code via unspecified vectors...

CVE-2018-0587

Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors...

CVE-2018-10942

modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...

CVE-2018-10942

modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...

Vulnerability of Jiangyin Talent System with Over-authorized Access

Jiangyin Talent Network Talent Recruitment System is a set of talent system developed by Jiangyin Extraordinary Technology Co. Jiangyin Talent System suffers from an override access vulnerability. The vulnerability is caused by the lack of authentication of the program. An attacker can use this...

CVE-2018-10795

Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment via a browser/liferay/browser.html?Type= or...

Easy File Sharing Web Server Unrestricted File Upload Vulnerability

Easy File Sharing Web Server is a file sharing WEB service program. An unrestricted file upload vulnerability exists in Easy File Sharing Web Server. An attacker can exploit this vulnerability to upload unauthorized malicious files...

CVE-2016-10036

Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to 1 deploy an arbitrary servlet application and execute arbitrary code by uploading a war file or 2 possibly write to arbitrary files and cause a denial of service by uploading a...

CVE-2016-10036

CVE-2016-10036 affects JFrog Artifactory

CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation...

Joomla! com_foxcontact plugin file upload vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A file upload vulnerability exists in the Joomla! comfoxcontact plugin, which can be exploited by remote attackers to upload malicious PHP scripts and execute arbitrary PHP code by...

YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php has file upload vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php has a file upload vulnerability. Allows an attacker to upload a webshell and gain serve...

Pivotal Spring Batch Admin Cross-Site Scripting Vulnerability

Pivotal Spring Batch Admin is the U.S. Pivotal Software's set of open source tools for monitoring and managing the Spring Batch system . A cross-site scripting vulnerability exists in the file upload feature in Pivotal Spring Batch Admin. A remote attacker can exploit this vulnerability by sendin...