CVE-2009-3447

CVE-2009-3447 describes an unrestricted file upload vulnerability in RADactive I-Load prior to 2008.2.5.0 that enables remote code execution by uploading a file with an executable extension and then requesting a predictable filename within a short window. Affected: RADactive I-Load (before 2008.2...

CVE-2009-3173

The Rat CMS Alpha 2 is affected by CVE-2009-3173 due to an unrestricted file upload in admin/add_album.php. An attacker can upload a file with an executable extension to the server, then access it via a direct request to the file under images/, potentially allowing remote code execution. The affe...

CVE-2008-7209

Unrestricted file upload vulnerability in the add2 action in aupload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request ...

Adobe RoboHelp Server RCE Vulnerability (APSB09-14/APSA09-05)

Adobe RoboHelp Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-7167

CVE-2008-7167 describes an unrestricted file upload vulnerability in Page Manager 2006-02-04, where uploading a file with an executable extension to upload.php allows remote attackers to execute arbitrary code by directly requesting the uploaded file in an unspecified directory. The issue is caus...

CVE-2008-7157

Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/...

CVE-2008-7157

CVE-2008-7157 describes an unrestricted file upload in EkinBoard 1.1.0 and earlier . An attacker can upload an avatar file with an executable extension followed by a safe extension, then access it via a direct request to the file in uploaded/avatars/ to potentially execute arbitrary code. The pro...

CVE-2008-7088

Technical details (affected product versions, root cause, exploit specifics) are not publicly available in the provided connected documents. Monitor for updates from vendors or security advisories.

CVE-2008-7052

CVE-2008-7052 describes an unrestricted file upload flaw in profile.php of the Pre Projects Pre Real Estate Listings application. The vulnerability allows remote authenticated users to upload a file with an executable extension as a profile logo and later access it directly via the re_images/ pat...

CVE-2008-6987

The CVE-2008-6987 entry relates to an unrestricted file upload vulnerability in the eZoneScripts Dating Website script that could allow remote code execution. The exact attack vectors are not specified, only that arbitrary code execution could occur via unknown vectors. Affected software is descr...

CVE-2008-6948

Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to 1 the showproject acti...

CVE-2008-6931

Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...

Unrestricted file upload

Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...

CVE-2008-6931

CVE-2008-6931 concerns an unrestricted file upload vulnerability in PHPStore Job Search (PHPCareers) . The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file under...

Unrestricted file upload

Unrestricted file upload vulnerability in editresumenext.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a photo in a profile edit action, then accessing the file via a direct request to jobseekers/logos...

CVE-2009-2270

CVE-2009-2270 describes an unrestricted file upload in the DedecMS 5.3 component, specifically in member/uploads_edit.php, allowing remote code execution when an attacker uploads a double-extension filename (e.g., .jpg.php) and then accesses it via unspecified vectors. Affected software: DedecMS ...

CVE-2009-2146

CVE-2009-2146 affects SugarCRM Community Edition prior to 5.2f. An Unrestricted file upload in the Emails module’s Compose Email feature allows remote authenticated users to execute arbitrary code by uploading a file with only an extension (e.g., .php) and then accessing the file via a manipulate...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2008-6822

The CVE-2008-6822 entry concerns the NEPT imgupload (Image Uploader) 1.0 product. A vulnerability in uploadp.php enables remote code execution via unrestricted file upload: an attacker uploads a file with an executable extension and a modified content type, and then accesses that file directly (d...

CVE-2008-6814

The CVE-2008-6814 entry affects SimpleBoard (com_simpleboard) for Mambo, specifically the Simpleboard Mambo module 1.0.1 and earlier. The vulnerability is an unrestricted file upload that allows remote code execution by uploading a file with an executable extension and an image/jpeg content type ...