CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4767

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

CVE-2008-4767

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

NEPT Image Uploader 1.0 - Arbitrary File Upload

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

CVE-2008-4428

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory...

CVE-2008-4366

Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a user directory under images/photos/uplo...

Sports Clubs Web Panel 0.0.1 - Arbitrary File Upload

--==+============================================================================+==-- --==+ Sports Clubs Web Panel 0.0.1 Remote File upload +==-- --==+============================================================================+==-- Discovered By: Stack + Discovered On: 11 Sep 2008 + Download:...

Kim Websites 1.0 (fckeditor) Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Kim Websites 1.0 fckeditor Remote Arbitrary File Upload Vulnerability ======================================================================= - Vulnerability: +--...

CVE-2008-3742

CVE-2008-3742 affects Drupal’s BlogAPI module in Drupal 5.x (before 5.10) and 6.x (before 6.4). The vulnerability is an unrestricted file upload where an authenticated user can upload a file with an executable extension that is not validated, enabling arbitrary code execution. OpenVAS/Fedora advi...

CVE-2008-3362

CVE-2008-3362 affects the WordPress Download Manager plugin (version 0.2) distributing an unrestricted file upload in upload.php. An attacker can upload a file with an executable extension via the upfile parameter and then access it at wp-content/plugins/downloads-manager/upload/ to execute arbit...

CVE-2008-3178

Unrestricted file upload vulnerability in uploadpictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uploading a .php file with a jpeg content type, then accessing it via a direct request to the file in upload/...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

CVE-2008-3181

Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/...

CVE-2008-3117

Unrestricted file upload in update_profile.php on PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file disguised as image content types (image/gif, image/jpeg, or image/pjpeg) and then accessing it via a direct request to the file under pi...

CVE-2008-3093

The CVE-2008-3093 issue affects ImperialBB 2.3.5 and earlier, where an unrestricted file upload flaw in the Upload_Avatar parameter allows remote authenticated users to upload and execute arbitrary PHP code by sending a .php filename with image/gif content type. Documents corroborate this configu...

CVE-2008-3001

CVE-2008-3001 affects Drupal’s Aggregation module (5.x) prior to 5.x-4.4. A crafted feed enables uploading files with arbitrary extensions, which could lead to remote code execution. Impact is described as remote attacker access with potentially complete compromise. A patch is available in 5.x-4....

CVE-2008-2988

Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/...

Page Manager CMS Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications =========================================================== Page Manager CMS Remote Arbitrary File Upload Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Unrestricted file upload

Unrestricted file upload vulnerability in calendaradmin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/...

LE.CMS 1.4 - Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua = LWP::UserAgent-new agent = 'Mozilla/4.0...