5527 matches found
CVE-2005-1031
CVE-2005-1031 affects RunCMS 1.1A and possibly other products based on e-Xoops (exoops). The vulnerability arises when the setting “Allow custom avatar upload” is enabled and the uploaded files are not properly verified, allowing remote attackers to upload arbitrary files. Connected sources corro...
runcms/e-xoops 1.1A and below file upload vulnerability
Products: runcms/e-xoops 1.1A http://www.runcms.org Summary: runcms/e-xoops 1.1A and below file upload vulnerability Description =========== runcms/e-xoops is an extensible, OO Object Oriented, easy to use dynamic web content management system written in PHP. runcms/e-xoops is the ideal tool for...
Logics Software LOG-FT - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...
phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload
source: https://www.securityfocus.com/bid/12653/info phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an announcement. A remote attacker may exploit...
CVE-2004-1548
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. dot dot in the filename...
GLSA-200501-41 : TikiWiki: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200501-41 TikiWiki: Arbitrary command execution TikiWiki does not validate files uploaded to the 'temp' directory. Impact : A malicious user could run arbitrary commands on the server by uploading and calling a PHP script...
CVE-2004-1408
The CVE-2004-1408 issue affects Image Gallery Web Application 0.9.10, specifically the addImage method in admin.class.php, which fails to properly validate filenames. This enables remote attackers to upload and execute arbitrary files. The vulnerability details are supported by CVE records (NVD/N...
CVE-2005-0269
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters...
CVE-2004-2333
Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files...
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. dot dot sequences in a .rjs skin file...
ArGoSoft FTP Server < 1.4.2.2 Shortcut File Upload
Binary data 2385.prm...
yak212.txt
Luigi Auriemma Application: Yak! http://www.digicraft.com.au/yak/ Versions: = 2.1.2 Platforms: Windows Bug: directory traversal upload Exploitation: remote Date: 15 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code ...
Directory traversal in Yak! 2.1.2
Luigi Auriemma Application: Yak! http://www.digicraft.com.au/yak/ Versions: = 2.1.2 Platforms: Windows Bug: directory traversal upload Exploitation: remote Date: 15 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code ...
phpPOC.txt
PHP File Upload Vulnerability POC Title: Overwrite $FILE array in rfc1867 - Mime multipart/form-data File Upload Author: Stefano Di Paola Affected: Php "; if isuploadedfile$FILES'userfile''tmpname' && moveuploadedfile$FILES'userfile''tmpname', $uploadfile print "File is valid, and was successfull...
PHP rfc1867.c $_FILES Array Crafted MIME Header Arbitrary File Upload
The remote host is running a version of PHP that is older than 4.3.9 or 5.0.2. The remote version of this software is affected by an unspecified file upload vulnerability that could allow a local attacker to upload arbitrary files to the server. This flaw can only be exploited locally...
Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload / Execution
source: https://www.securityfocus.com/bid/10174/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by a file upload and execution vulnerability. This issue is due to a design error that allows a remote user to specify a file to be uploaded and executed on a system running th...
CVE-2003-1501
Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. dot dot in the reqfile parameter...
php67.txt
Informations : °°°°°°°°°°°°° Language : PHP Version : 6.7 Website : http://www.phpnuke.org Problem : File Upload PHP Code/Location : °°°°°°°°°°°°°°°°°°° modules/WebMail/mailattach.php :...
CVE-2003-0482
TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using filenew.php, then directly accessing the uploaded code via a request to the repository containing the code...