3378 matches found
Multiple bugs in TFT-Gallery
Script Name: TFT-Gallery Authors: Mike Scalora, Eric Thelin, Sascha Lorenz & Jan Berndt Website: http://tftgallery.sourceforge.net Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: TFT-Gallery is a PHP-base...
CVE-2006-5918
CVE-2006-5918 describes an unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro and some other versions, where remote attackers can upload and execute arbitrary PHP scripts through the "Link to Download" field. This field may be restricted to files on public sites in s...
CVE-2006-5411
The CVE-2006-5411 entry concerns an unrestricted file upload in Free Web Publishing System (FreeWPS) via upload.php, potentially affecting version 2.11 and earlier. Remote attackers could upload and execute arbitrary PHP programs. The vulnerability enables partial confidentiality, integrity, and ...
CVE-2006-5016
The CVE concerns Szava Gyula and Csaba Tamas e-Vision CMS (likely version 1.0). The vulnerable component is admin/x_image.php, where an unrestricted file upload allows remote attackers to place arbitrary files in the /imagebank directory. The vulnerability’s root cause is an unconstrained upload ...
GLSA-200609-16 : Tikiwiki: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200609-16 Tikiwiki: Arbitrary command execution A vulnerability in jhot.php allows for an unrestricted file upload to the img/wiki/ directory. Additionally, an XSS exists in the highlight parameter of tiki-searchindex.php. Impact ...
Tikiwiki: Arbitrary command execution
Background Tikiwiki is a web-based groupware and content management system, developed with PHP, ADOdb and Smarty. Description A vulnerability in jhot.php allows for an unrestricted file upload to the img/wiki/ directory. Additionally, an XSS exists in the highlight parameter of...
CVE-2006-4977
The vulnerability described in CVE-2006-4977 affects Walter Beschmout PhpQuiz 1.2 and earlier, specifically in back/upload_img.php and admin/upload_img.php. It is an unrestricted file upload flaw that lets remote attackers upload arbitrary PHP code to the phpquiz/img_quiz folder by abusing the (a...
CVE-2006-4922
CVE-2006-4922 describes an unrestricted file upload in Site@School (S@S) 2.4.02 and earlier, specifically in starnet/editors/htmlarea/popups/images.php. The vulnerability enables remote attackers to upload and execute arbitrary files with executable extensions. The available documents identify th...
CVE-2006-4859
Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...
CVE-2006-4617
The CVE-2006-4617 entry documents an unrestricted file upload vulnerability in vtiger CRM 4.2.4 (and possibly earlier). The flaw is triggered via fileupload.html, permitting remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails directory. The associ...
CVE-2006-4602
CVE-2006-4602 affects TikiWiki (jhot.php) prior to/including 1.9.4 Sirius and earlier. Unrestricted file upload allows remote attackers to place a .php file in img/wiki/ and execute arbitrary PHP code. Connected sources document a remote-code-execution risk via jhot.php upload validation flaw; ex...
imageVue < 16.2 admin/upload.php Unrestricted File Upload
The remote host is running imageVue, a web-based photo gallery application written in PHP. The installed version of imageVue allows unauthenticated attackers to upload arbitrary files, including files containing code that can then be executed subject to the privileges of the web server user id. I...
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content...
ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload
source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation could allow attackers to upload an...
CVE-2005-4422
CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...
CVE-2004-2690
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...
CVE-2003-1552
Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...