CVE-2019-16113

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname...

PT-2019-14517

Name of the Vulnerable Software and Affected Versions Bludit version 3.9.2 Description The issue allows remote code execution via the "bl-kernel/ajax/upload-images.php" endpoint. This is possible because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP cod...

CVE-2019-16113: Improper Limitation of a Pathname to a Restricted Directory

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname...

Bludit 3.9.2 remote code execution

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. Recent assessments: wchen-r7 at October 24, 2019 4:38am UTC reported: CVE-2019-16113 Bludit...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

CVE-2019-1010062

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

PT-2019-11455

Name of the Vulnerable Software and Affected Versions: PluckCMS versions 4.7.4 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially leading to the execution of a webshell. This is achieved by modifying the MIME TYPE in an HTTP request to...

CVE-2019-1010062: Unrestricted Upload of File with Dangerous Type

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit...

PT-2019-6894

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Recommendations For Mambo CMS version 4.6.5, consider restricting...

CVE-2013-2565: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

CVE-2018-11736

An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jpeg content type for a .htaccess file...

PT-2018-10792

Name of the Vulnerable Software and Affected Versions Pluck versions prior to 4.7.7-dev2 Description An issue was discovered that allows remote attackers to upload and execute arbitrary PHP code. This is achieved by using the image/jpeg content type for a .htaccess file in the /data/inc/images.ph...

CVE-2018-11736: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jpeg content type for a .htaccess file...

WordPress mobile-app-builder-by-wappress arbitrary file upload vulnerability

WordPress mobile-app-builder-by-wappress is a mobile app development plugin for WordPress. An arbitrary file upload vulnerability exists in WordPress mobile-app-builder-by-wappress version 1.05, which originates from . The vulnerability stems from code in the...

PT-2017-10989

Name of the Vulnerable Software and Affected Versions mobile-friendly-app-builder-by-easytouch version 3.0 Description The issue concerns a lack of authentication or access control in the mobile-friendly-app-builder-by-easytouch plugin for WordPress, specifically in the file...

CVE-2017-1002000: Unrestricted Upload of File with Dangerous Type

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

FineCMS 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

FineCMS multi vulnerablity

Reflected XSS in getimage.php Technical Description: file /application/lib/ajax/getimage.php the $POST'id' and $POST'name' and $GET'folder' without any validated, sanitised or output encoded. Proof of ConceptPoC http://yourfinecms/application/lib/ajax/getimage.php?folder=1 POST: id=1"alert1&name=...

PT-2017-11819

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-12 Description The issue allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action in the application/core/controller/images.php file. Recommendations For FineCMS through...

CVE-2017-11201: Improper Neutralization of Input During Web Page Generation

application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action...