2450 matches found
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
Arbitrary file upload in jQuery Upload File = 4.0.2...
CVE-2018-9207
CVE-2018-9207 refers to an arbitrary file upload vulnerability in jquery-file-upload (
jQuery Upload File 4.0.2 File Upload
File upload vulnerability in jQuery Upload File php/upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
jQuery File Upload < 9.22.1 Arbitrary File Upload
According to its self-reported version number, jQuery File Upload is prior to 9.22.1. Therefore, it may be affected by an arbitrary file upload vulnerability. An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web application user. Note...
jQuery File Upload < 9.24.1 Arbitrary File Upload
According to its self-reported version number, jQuery File Upload is prior to 9.24.1. Therefore, it may be affected by an arbitrary file upload vulnerability on a web server that executes files with .php as part of the file extension. An unauthenticated attacker could leverage this vulnerability ...
jQuery File Upload < 9.25.1 Potential Vulnerability With ImageMagick
According to its self-reported version number, jQuery File Upload is prior to 9.25.1. Therefore, it may be used to exploit remote code execution in an unpatched ImageMagick version. An unauthenticated attacker could leverage this vulnerability to gain access to the host in the context of the web...
blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...
CVE-2018-9208
The CVE-2018-9208 entry corresponds to an Unaithenticated arbitrary file upload vulnerability in the jQuery Picture Cut component (<= v1.1Beta). Connected sources consistently describe that an unauthenticated user can upload arbitrary files via the vulnerable upload path (e.g., upload.php), en...
CVE-2018-9208
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...
CVE-2018-9208
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...
CVE-2018-9208
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...
Design/Logic Flaw
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...
CVE-2018-9208
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...
blueimp jQuery Arbitrary File Upload
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...
jQuery < 1.6.3 Cross-Site Scripting
According to its self-reported version number, jQuery is prior to 1.6.3. Therefore, it may be affected by a cross-site scripting vulnerability due to location.hash function. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported versio...
jQuery 3.0.0-rc.1 Denial of Service
According to its self-reported version number, jQuery is 3.0.0-rc.1. Therefore, it may be affected by a denial of service vulnerability due to an infinite recursion on non-lowercase attribute getters. Note that the scanner has not tested for these issues but has instead relied only on the...
blueimp jQuery Arbitrary File Upload Exploit
This Metasploit module exploits an arbitrary file upload in the sample PHP upload handler for blueimp's jQuery File Upload widget in versions 9.22.0 and below. Due to a default configuration in Apache 2.3.9+, the widget's .htaccess file may be disabled, enabling exploitation of this vulnerability...
jQuery 1.4.2 < 1.6.2 Cross-Site Scripting
According to its self-reported version number, jQuery is at least 1.4.2 and prior to 1.6.2. Therefore, it may be affected by a cross-site scripting vulnerability due to using the text function inside the after function. Note that the scanner has not tested for these issues but has instead relied...
jQuery 1.7.1 < 1.9.0 Cross-Site Scripting
According to its self-reported version number, jQuery is at least 1.7.1 and prior to 1.9.0. Therefore, it may be affected by a cross-site scripting vulnerability due to jQuerystrInput. Note that the scanner has not tested for these issues but has instead relied only on the application's...