Family Connections CMS v2. 5. 0-v2. 7. 1 (less.php) remote command execution exploit-vulnerability warning-the black bar safety net

Author: TPCS From: 90sec Blog: http://blog.163.com/jianshitianxiaao/ 0x01 introduction Recently in practice some PoC, to find this old cave to practice hand, the first PoC released is in the exploitDB on, just not posted the link, we go to search under it. A start to get to the original PoC, want...

akcms code execution vulnerability-vulnerability warning-the black bar safety net

Last week digging out of the akcms background stencil getshell feeling nothing new, and then carefully looked at the code, found a comparison with“the future”of the hole, the code execution vulnerability, and the problem function is that the authors provided to the station user for secondary...

qdPM 7.0 - Arbitrary '.PHP' File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "qdPM v7 Arbitrary...

Multiple vulnerabilities in Banana Dance

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Banana Dance, which can be exploited to gain access to sensitive information, perform SQL injection attacks and compromise vulnerable system. 1 PHP File Inclusion in Banana Dance: CVE-2012-5242 Input passed via the "nam...

ProjectPier 0.8.8 Shell Upload

Exploit for php platform in category web applications ProjectPier 0 echo $FILES"file""error" . " " . $FILES"file""name" . " " . $FILES"file""tmpname"; else $folder = rtrim './upload/' . $POST'folder' , '/'; @mkdir$folder, 0777, true; $seq = strpadint $POST"part",4,"0",STRPADLEFT;...

ProjectPier 0.8.8 Shell Upload

ProjectPier 0 echo $FILES"file""error" . " " . $FILES"file""name" . " " . $FILES"file""tmpname"; else $folder = rtrim './upload/' . $POST'folder' , '/'; @mkdir$folder, 0777, true; $seq = strpadint $POST"part",4,"0",STRPADLEFT; moveuploadedfile$FILES"file""tmpname", $folder . '/'...

CVE-2011-5195

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5197

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5196: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2011-5195: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5197: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

Group-Office Calendar SQL Injection

/------------------------------------- | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability located in the calendar module. A PHP file...

CVE-2012-4389

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file...

Design/Logic Flaw

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file...

CVE-2012-4389

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file...

CVE-2012-1645: Exposure of Sensitive Information to an Unauthorized Actor

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

XODA 0.4.5 - Arbitrary '.PHP' File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "XODA 0.4.5...

php.s3.to Upload Script Shell Upload

Explit Title : "PHP S3 TO" Remote File Upload Download : http://php.s3.to/script.php Author : MR.XpR Test on : LinuX R3dH4t Bug discovered by : IRANHACK SecuRITY TEAM + Exploit : ProtocolSite.CoM/dir/up/upload.php -------------------------------------------------------------- + Load files From :...

WordPress Front End Upload v0. 5. 4. 4 arbitrary php file upload-vulnerability warning-the black bar safety net

Title: WordPress Front End Upload v0. 5. 4. 4 Arbitrary PHP File Upload Vulnerability Author: Chris Kellum Home page: http://mondaybynoon.com/ Software address: http://downloads.wordpress.org/plugin/front-end-upload.0.5.4.4.zip Affected version: 0.5.4.4 Defect analysis ===================== Plugi...