AirDrive HD 1.6 iPad iPhone - Multiple Vulnerabilities

Title: ====== AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=865 VL-ID: ===== 865 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

Wordpress plugins wp-levoslideshow Arbitrary File Upload Vulnerability

The attacker can uplaod file/shell.php.gif 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

Outdated version of WordPress leads to MasterCard Hack

On tip of a readers, yesterday we came across a new MasterCard hack, performed by Syrian Electronic Army. Hackers was able to breach MasterCard Blog https://insights.mastercard.com and make a new blog post on the website with title "Hacked By Syrian Electronic Army" on January 5, 2013. For now...

Outdated version of WordPress leads to MasterCard Hack

On tip of a readers, yesterday we came across a new MasterCard hack, performed by Syrian Electronic Army. Hackers was able to breach MasterCard Blog https://insights.mastercard.com and make a new blog post on the website with title "Hacked By Syrian Electronic Army" on January 5, 2013. For now...

CVE-2012-6498

Unrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file, as exploited in the wild in October 2012...

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

CVE-2012-6081

Removed by vendor...

Java write file file name 0 0 truncation BUG that caused file upload vulnerability and fix-vulnerability warning-the black bar safety net

Java in the above two environments to write the files, because 0 0 is truncated and not correct for the new generated file name. For example, the user needs to username abc. jsp . jpg, but after 0 0 after truncation, the resulting file name becomes the abc. jsp , therefore we are in relation to t...

Clockstone and other CMSMasters Theme File Upload Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: "wp-content/themes/clockstone" Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Software Link:...

PDW File Browser v1.0 beta Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- pdw file browser Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16 Facebook =...

The new concept of foreign language network teaching platform file upload vulnerability-vulnerability warning-the black bar safety net

A lot of universities are using this learning platform, this vulnerability can lead directly to get questions answers, or even as a springboard to continue to penetrate into other school Server Detailed description: South of the Open University as an example: http://222.30.60.3/NPELS...

jquery.uploadify-v2.1.4 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- jquery.uploadify-v2.1.4 Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16...

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary code by uploading a file via an unspecified page...

CVE-2012-5893

Unrestricted file upload vulnerability in havaupload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/...

Etiko CMS Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' CMS Etiko Arbitrary File Upload Vulnerability Google Dork: intext:"CMS Etiko" Date: 27/10/2012 Author: Sys32 Email: tha.Sys32atgmaildotcom Vendor: http://www.etikweb.com/ Category:...

CVE-2012-1153

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2012-1153

Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

The hospital was built Station system arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

| Vulnerability file: upfile. aspx I first posted 9 8 line to 1 3 0 lines of code out ,look a bit funny! Google for: inurl:cms/Column. aspx? that inurl:cms/Column. aspx? LMID= too much,your own to find more keywords! | 0 1 | ---|--- 0 2 | function chkform ---|--- 0 3 | ---|--- 0 4 | ---|--- 0 5 |...

CVE-2011-5161

OpenEMR 4 is affected by an Unrestricted file upload vulnerability in the patient photograph feature. An attacker can upload a file with an executable extension followed by a safe extension and then access it via a direct request to the documents/ patient directory, allowing remote code execution...

Sflog! CMS 1.0 - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Sflog! CMS 1.0...