Semrush: Remote Code Execution on www.semrush.com/my_reports on Logo upload

The Logo upload in the report constructor at: https://www.semrush.com/myreports/constructor F340480 is passed through a not properly patched version of ImageMagick. You can use Postscript to get Ghostscript to run which in return allows to trigger arbitrary commands on the server, leading to Remo...

Vtiger CRM 6.3.0 Authenticated Logo Upload Remote Command Execution Exploit

Vtiger version 6.3.0 CRM's administration interface allows for the upload of a company logo. Instead of uploading an image, an attacker may choose to upload a file containing PHP code and run this code by accessing the resulting PHP file. This Metasploit module was tested against vTiger CRM versi...

Coinbase: Stored CSS Injection

When creating a product, users can upload a logo. The logourl was not escaped properly, allowing an attacker to inject malicious characters into a style tag. This vulnerability did not allow for XSS due to our CSP, however, it did allow for CSS injection...

NiuShop open source mall system v1.21 file upload vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system v1.21 file upload vulnerability exists. The vulnerability is due to the...

CVE-2017-9538

The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service permanent display of a "Cannot exit above the top directory" error message throughout the entire web application via a ".." in the pat...

Synology Photo Station File Upload Vulnerability (CNVD-2017-27721)

Synology Photo Station is an online photo album and blog owned and managed by DSM users. A file upload vulnerability exists in synothemeupload.php in Synology Photo Station, which can be exploited by remote attackers to upload arbitrary files without authentication via the logoupload operation...

CVE-2017-11151

A vulnerability in synothemeupload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logoupload action...

vtiger Company Logo Upload Arbitrary Command Execution Vulnerability

vtiger CRM is a Web-based sales force automation SFA based customer relationship management system CRM. A security vulnerability exists in the logo upload function in the vtiger CRM SettingsVtigerCompanyDetailsSaveAction class, which allows authenticated users to upload arbitrary files and execut...

Vtiger CRM - Authenticated Logo Upload RCE

Vtiger 6.3.0 CRM's administration interface allows for the upload of a company logo. Instead of uploading an image, an attacker may choose to upload a file containing PHP code and run this code by accessing the resulting PHP file. This module was tested against vTiger CRM v6.3.0. Module Options m...

MobileCartly 1.0 - Remote File Upload Vulnerability

No description provided by source. Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on: Ubuntu...

eYou v4 /grad/admin/admin_logo_upload.php 命令执行漏洞

No description provided by source...

MobileCartly 1.0 Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0...

MobileCartly 1.0 Shell Upload

Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on: Ubuntu 10.10 + PHP 5.3.3 1. Vuln Code :...

MobileCartly 1.0 - Arbitrary File Upload

MobileCartly 1.0 - Arbitrary File Upload Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on:...

MobileCartly 1.0 - Arbitrary File Upload

Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on: Ubuntu 10.10 + PHP 5.3.3 1. Vuln Code :...

Vacation Rental Script 4.0 Shell Upload

Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for login and password So login in:...

Vacation Rental Script 4.0 - Arbitrary File Upload

Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for login and password So login in:...