3312 matches found
CVE-2006-4977
The vulnerability described in CVE-2006-4977 affects Walter Beschmout PhpQuiz 1.2 and earlier, specifically in back/upload_img.php and admin/upload_img.php. It is an unrestricted file upload flaw that lets remote attackers upload arbitrary PHP code to the phpquiz/img_quiz folder by abusing the (a...
CVE-2006-4922
CVE-2006-4922 describes an unrestricted file upload in Site@School (S@S) 2.4.02 and earlier, specifically in starnet/editors/htmlarea/popups/images.php. The vulnerability enables remote attackers to upload and execute arbitrary files with executable extensions. The available documents identify th...
CVE-2006-4859
Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...
CVE-2006-4617
The CVE-2006-4617 entry documents an unrestricted file upload vulnerability in vtiger CRM 4.2.4 (and possibly earlier). The flaw is triggered via fileupload.html, permitting remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails directory. The associ...
CVE-2006-4602
CVE-2006-4602 affects TikiWiki (jhot.php) prior to/including 1.9.4 Sirius and earlier. Unrestricted file upload allows remote attackers to place a .php file in img/wiki/ and execute arbitrary PHP code. Connected sources document a remote-code-execution risk via jhot.php upload validation flaw; ex...
imageVue < 16.2 admin/upload.php Unrestricted File Upload
The remote host is running imageVue, a web-based photo gallery application written in PHP. The installed version of imageVue allows unauthenticated attackers to upload arbitrary files, including files containing code that can then be executed subject to the privileges of the web server user id. I...
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content...
ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload
source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation could allow attackers to upload an...
CVE-2005-4422
CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...
CVE-2004-2690
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...
CVE-2003-1552
Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...