[SA16598] Simple PHP Blog Image File Upload Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

PT-2004-3157 · E107 · E107

Name of the Vulnerable Software and Affected Versions: e107 versions prior to 0.617 Description: The issue allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to "images.php". This is due to the improper checking of uploaded file types by ImageManage...

JetboxOne may allow unauthorized users to execute arbitrary code

Overview Lack of input validation in JetboxOne version 2.0.8 allows an user to upload arbitrary files to the vulnerable system. This could lead to the execution of arbitrary code. Description JetboxOne, an open-source content management system, could allow an attacker with "AUTHOR" privileges to...