WooThemes Daily Edition <= 1.6.2 - Unrestricted File Upload

The dailyedition WordPress theme was affected by an Unrestricted File Upload security vulnerability...

D-Link DCS-931L with firmware unlimited file upload vulnerability

The D-Link DCS-931L is a D-Link home wireless network camera. An unrestricted file upload vulnerability exists in the D-Link DCS-931L with firmware 1.04 earlier, which could allow a remote, authenticated user to execute arbitrary code by uploading a file with an executable file extension...

CVE-2015-2087

Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors...

CVE-2015-2087

CVE-2015-2087: Drupal Avatar Uploader module (6.x-1.x) before 6.x-1.3 has an unrestricted file upload flaw due to inadequate file-extension validation, enabling remote authenticated users to upload a PHP file and execute code via unspecified vectors. The fixed version is Avatar Uploader 6.x-1.3. ...

CVE-2015-2049

CVE-2015-2049 describes an Unrestricted Upload of File with Dangerous Type affecting D-Link DCS-931L and related DCS-93xL family devices. The vulnerability exists in firmware 1.04 and earlier, where an authenticated remote attacker can upload a file with an executable extension, enabling arbitrar...

PT-2015-5569 · D Link · Dcs-931L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-931L versions 1.04 and earlier Description: The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, due to an unrestricted file upload vulnerability. Recommendations:...

WeBid 1.1.1 - Unrestricted Arbitrary File Upload

WeBid 1.1.1 - Unrestricted Arbitrary File Upload ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title ...

WeBid 1.1.1 - Unrestricted Arbitrary File Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : WeBid 1.1.1 Unrestricted File Upload Exploit...

WeBid 1.1.1 Unrestricted File Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : WeBid 1.1.1 Unrestricted File Upload Exploit...

WordPress Foxypress Plugin Unrestricted File Upload

An unauthorized file upload vulnerability has been reported in WordPress Foxypress Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Maarch LetterBox 2.8 Unrestricted File Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class Metasploit3 'Maarch LetterBox 2.8 Unrestricted File Upload', 'Description' = %q This module exploits a file upload vulnerabilit...

Photo Gallery <= 1.2.5 - Unrestricted File Upload

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

WordPress Photo Gallery 1.2.5 Unrestricted File Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'json' class Metasploit3 'WordPress Photo Gallery 1.2.5 Unrestricted File Upload', 'Description' = %qPhoto Gallery Plugin...

EasyCart <= 3.0.15 - Unrestricted File Upload

In versions = 3.0.8 this can be exploited by authenticating as any WordPress user, and in versions 3.0.9 - 3.0.15 can be exploited by passing a valid password hash being used by any admin in the EasyCart user system...

WordPress Plugin WP EasyCart - Unrestricted Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WP EasyCart Unrestricted File Upload', 'Description' = %qWordPress Shopping Cart WP EasyCart Plugin for WordPress...

WordPress WP EasyCart Plugin - Unrestricted File Upload

WP EasyCart plugin is prone to an unrestricted file upload vulnerability that exists because the /inc/amfphp/administration/banneruploaderscript.php does not properly clean up user-uploaded files. An attacker can do the script with the privileges of the web server by making a direct request to th...

WordPress WP EasyCart Unrestricted File Upload

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WP EasyCart Unrestricted File Upload', 'Description' = %qWordPress Shopping Cart WP EasyCart Plugin for WordPress...

CVE-2015-0868

CVE-2015-0868 is an unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS, affecting versions up to and including 2.90 (2.91 fixes referenced by sources). The flaw allows a remote attacker to upload an executable file and potentially execute arbitrary code on the ser...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct 1 cross-site scripting XSS, 2 SQL injection, or 3 unrestricted file upload attacks...

CVE-2015-1374

CVE-2015-1374 relates to multiple CSRF vulnerabilities in ferretCMS 1.0.4-alpha, specifically in admin.php, enabling remote attackers to hijack administrator authentication for requests that perform (1) XSS, (2) SQL injection, and (3) unrestricted file upload. The connected sources confirm the af...