PYSEC-2013-6

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

CVE-2012-6081

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...

moinmoin -- Multiple vulnerabilities

MoinMoin developers report the following vulnerabilities as fixed in version 1.9.6: remote code execution vulnerability in twikidraw/anywikidraw action, path traversal vulnerability in AttachFile action, XSS issue, escape page name in rss link. CVE entries at MITRE furher clarify: Multiple...

CVE-2012-5893

The CVE-2012-5893 entry concerns Havalite CMS (versions up to 1.1.0). A vulnerability in hava_upload.php allows unrestricted file upload, where an attacker can upload a file with a .php;.gif extension and then access it directly under tmp/files/ to execute arbitrary code on the server. This const...

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony CMS 2.3 - Multiple Vulnerabilities Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...

CVE-2012-5318

The CVE-2012-5318 entry is confirmed with concrete details: it affects the Kish Guest Posting WordPress plugin (version 1.2) via an Unrestricted file upload in uploadify/scripts/uploadify.php. The vulnerability allows remote attackers to execute arbitrary code by uploading a file with a double ex...

WordPress Kish Guest Posting Plugin <= 1.2 - Unrestricted File Upload

Because of this vulnerability in uploadify/scripts/uploadify.php, the attackers can execute arbitrary code by uploading a file with a double extension. After that they access it via a direct request to the file in the directory specified by the "folder" parameter. Solution Update the plugin...

CVE-2012-1153

Summary of technical details (CVE-2012-1153): appRain CMF is vulnerable to an unrestricted/arbitrary PHP file upload via the helper file uploadify.php in the uploads/ directory. Affected version: CMF 0.1.5 and earlier. Root cause: inadequate validation in the upload mechanism allows an attacker t...

VulnCheck KEV: CVE-2012-6081

Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable...

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

CVE-2011-5134

CVE-2011-5134 describes an unrestricted file upload vulnerability in the Joomla! JCE editor component (editor/extensions/browser/file.php) prior to version 2.0.18. The issue allows remote authenticated users with author privileges to upload a file with a double extension (e.g., .php.gif) and ther...

Joomla Component joomgalaxy v1.2.0.5 Remote File Upload

Exploit for php platform in category web applications Exploit Title: Joomgalaxy Remote File Upload v1.2.0.5 dork: inurl:comjoomgalaxy Date: 21-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.5...

Unrestricted file upload

Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message...

Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities

Joomla! Component comjoomgalaxy 1.2.0.4 - Multiple Vulnerabilities Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...

Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities

Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...

Joomla Component com_joomgalaxy 1.2.0.4 Multiple Vulnerabilites

Exploit for php platform in category web applications Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version...

Joomla! Component com_osproperty 2.0.2 - Unrestricted Arbitrary File Upload

Joomla! Component comosproperty 2.0.2 - Unrestricted Arbitrary File Upload Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ &...

WordPress Resume Submissions / Job Postings 2.5.1 Shell Upload

Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link: http://downloads.wordpress.org/plugin/resume-submissions-job-postings.2.5.1.zip Version: 2.5.1...

WordPress Resume Submissions & Job Postings Plugin - Unrestricted File Upload

Resume Submissions & Job Postings plugin is prone to an unrestricted file upload vulnerability. It causes several problems: uploaded file can be accessed directly by understanding how the plugin renames files, file names are rewritten by the following code, also the plugin creates an MD5 hash of...

Joomla Component com_osproperty Unrestricted File Upload

Exploit for php platform in category web applications Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ & http://poisonsecurity.wordpress.com/ Vendor:...