UBUNTU-CVE-2016-9186

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors...

SweetRice 1.5.1 File Upload

||/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Unrestricted File Upload Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp ...

Dotclear Unlimited File Upload Vulnerability

Dotclear is an open source free web publishing software is an open source free web publishing software. An unrestricted file upload vulnerability exists in Dotclear, which can be exploited by an attacker to execute arbitrary PHP code by uploading a zip file...

WordPress Neosense Theme <= 1.7 - Unrestricted File Upload

A copy of the "qquploader" ajax file uploader was found in this theme's directory. An attacker can upload any file to the site by using this uploader. Solution Update the theme...

Neosense Theme < 1.8 - Unrestricted File Upload

Neosense is a commercial WordPress theme by dynamicpress. Version 1.7 and possibly earlier includes in its theme directory a copy of the "qquploader" ajax file uploader, which does not verify user authorization. Using this uploader, an attacker can upload any file to the site. The uploaded file i...

Jobberbase 2.0 Disclosure / XSS / Code Execution / Upload

Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...

Jobberbase 2.0 - Multiple Vulnerabilities

Jobberbase 2.0 - Multiple Vulnerabilities Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...

CumulusClips 2.4.1 Code Execution / CSRF / Cross Site Scripting

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Aukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

CumulusClips 2.4.1 - Multiple Vulnerabilities

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Łukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

RSS News AutoPilot Script 1.0.13.0.3 - Cross-Site Request Forgery

RSS News AutoPilot Script 1.0.13.0.3 - Cross-Site Request Forgery Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to Persistent XSS and RCE Through Unrestricted File Upload Date: 30 August 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link:...

RSS News AutoPilot Script 1.0.1/3.0.3 - Cross-Site Request Forgery

Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to Persistent XSS and RCE Through Unrestricted File Upload Date: 30 August 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0.1 to 3.0.3...

CVE-2016-5050

Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...

CVE-2016-5050

CVE-2016-5050 is an uncontrolled/ unrestricted file upload vulnerability within ReadyDesk 9.1, exploitable via chat/sendfile.aspx to upload a .aspx file and execute arbitrary code. The NVD entry documents an attack path that requires no authentication and network access, with a high severity (CVS...

Vtiger CRM < 6.5.0 Multiple Vulnerabilities

Vtiger CRM is prone to a privilege escalation and unrestricted file upload vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the Apache Tomcat software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of “Unrestricted File Upload” in Apache Tomcat, along with outdated code for java.io.File and non-standard JMX configurations, allows malicious actors to execute arbitrary code by uploading a JSP file and gaining access to it...

WordPress Advanced Access Manager Plugin <= 3.3 - Unrestricted File Upload

Because of this vulnerability, users can change their privilege level. Solution Update the plugin...

WordPress Remote Upload Plugin <= 1.2.1 - Unrestricted File Upload

This plugin is prone to an unrestricted file upload vulnerability. Solution Update the plugin...

Remote Upload <= 1.2.1 - Unrestricted File Upload

The remote-upload WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

CVE-2015-6022

QCV: CVE-2015-6022 describes an unrestricted file upload in QNAP Signage Station prior to version 2.0.1. An authenticated user can upload a dangerous file (e.g., a PHP script) and access it via a predictable URL to execute code with the server’s privileges. Impact is remote code execution with hi...

CVE-2015-6022

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...