ClipperCMS 1.3.0 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public:...

Kaboozu CMS Shell Upload

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / = 1 Kasımda oylar MHP'ye, ona göre.. = / / / Kaboozu CMS x.x.x - Remote Shell Upload Vulnerability 0day My + Discovered by: KnocKout Contact :...

ProjeQtor 4.5.2 Shell Upload

Vulnerability title: Arbitrary File Upload In ProjeQtor CVE: Not yet assigned Vendor: ProjeQtor Product: ProjeQtor Affected version: 4.5.2 Fixed version: 4.5.3 Reported by: Arturo Rodriguez Details: It was discovered that authenticated users were able to upload files with extensions: php3, php4,...

Unified Layer Shell Upload

/------ Unified-Layer Unrestricted File Upload Exploit /------ Author: UmPire / [email protected] /------ Iran Security Group / iransec.net Hi guys, With this exploit, You can upload files with any extensions you want in sites that are hosted on unified layer and its children like bluehost,...

Kirby CMS 2.1.0 CSRF / Shell Upload

============================================= - Release date: 14.09.2015 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- Kirby CMS = 2.1.0 CSRF Content Upload and PHP Script Execution II. BACKGROUND...

Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities

Silver Peak VX virtual appliance running VXOA before version 6.2.11 contains a number of security vulnerabilities, including command injection, unauthenticated file read, mass assignment, shell upload, and hardcoded credentials. By combining these vulnerabilities, an attacker may remotely obtain...

Silver Peak VXOA 6.2.11 - Multiple Vulnerabilities

Silver Peak VXOA 6.2.11 - Multiple Vulnerabilities , , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Silver Peak VXOA Multiple Vulnerabilities Affected versions: Silver Peak VX 6.2.11 PDF:...

Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Silver Peak VXOA Multiple Vulnerabilities Affected versions: Silver Peak VX 6.2.11 PDF:...

Silver Peak VX Command Injection / Shell Upload / File Read

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Silver Peak VXOA Multiple Vulnerabilities Affected versions: Silver Peak VX 6.2.11 PDF:...

Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF

The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor. PoC Create a file name...

Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF

The original advisory states that this vulnerability is exploitable with editor and author roles but this is incorrect. Only the administrator role by default can trigger this vulnerability. However, CSRF on the image upload form makes this exploitable by a malicious actor. Create a file named...

WordPress Responsive Thumbnail Slider Plugin 1.0 - XSS / Arbitrary File Upload Vulnerabilities

Exploit for php platform in category web applications " name="thumbnails" " style="width:50px" height="50px"/ input type="checkbox" val...

Vifi Radio 1 Shell Upload / CSRF

. | | / | | \ \ | | \ / | |\ / / /\ \ / \ | Y / ^ / / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Vifi Radio v1 - Arbitrary File Upload Vulnerability with CSRF My + Discovered by: KnocKout Contact : [email protected] HomePage :...

Bolt 2.2.4 Shell Upload Vulnerability

Bolt version 2.2.4 suffers from a code execution vulnerability via shell upload. Bolt 2.2.4: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: Bolt 2.2.4 Fixed in: 2.2.5 Fixed Version Link: http://bolt.cm/distribution/archive/bolt-2.2.5.zip Vendor Contact:...

Bolt 2.2.4 Shell Upload

Bolt 2.2.4: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: Bolt 2.2.4 Fixed in: 2.2.5 Fixed Version Link: http://bolt.cm/distribution/archive/bolt-2.2.5.zip Vendor Contact: Website: https://bolt.cm Vulnerability Type: Code Execution Remote Exploitable:...

WordPress Mailcwp 1.99 Shell Upload Exploit

WordPress Mailcwp plugin version 1.99 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in mailcwp v1.99 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-09 Download Site: https://wordpress.org/plugins/mailcwp/ Vendor: CadreWorks Pty Ltd...

WordPress ACF Frontend Display Shell Upload

+---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Tested on: KaliLinux + Friendly Sites: sec4ever.com + Twitter: @TCYB3R...

Elitenetwork Advanced Social Network Script Shell Upload

| Title : Elitenetwork Advanced Social Network Script Upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright © 2015 Elitenetwork. All rights reserved. Powered by Elitecode. | Tested on: win8.1 Fr V.Pro 23:19 22/05/2015 | Download :...

Five Cars Information Technology (Beijing) Limited Library System File Upload Vulnerability

Five Cars Information Technology Beijing Co., Ltd. has been committed to the application of the field of digital publishing, providing related products technology and services. A file upload vulnerability exists in the library system/5clib/ebookupload/ebookupload.jsp of Five Cars Information...

Enterprise-level CRM system SuiteCRM file upload vulnerability report with EXP-a vulnerability warning-the black bar safety net

SuiteCRM is an affordable and easy-to-use enterprise-grade CRM, SuiteCRM is designed to help your business to thousands of passenger enables the user to communicate, share sales information, facilitate transactions and keep the customer happy. Thousands of businesses every day to use Sugar to...