PT-2015-4823

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace version 8.61.9 Description The issue is related to an unrestricted file upload vulnerability in the Custom Prompts upload implementation. This allows remote authenticated users to execute arbitrary code by uploading ...

PT-2015-4994

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2 Description The issue is related to an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content...

CVE-2015-0968: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type, a different vulnerability than CVE-2013-3590...

Wordpress N-Media Website Contact Form with File Upload 1.3.4 - Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/website-contact-form-with-file-upload.1.3.4.zip Da...

N-Media Website Contact Form with File Upload <= 1.3.4 - Arbitrary File Upload

The "uploadfile" ajax function is affected from unrestricted file upload vulnerability. PoC curl -k -X POST -F "action=upload" -F "Filedata=@./backdoor.php" -F "action=nmwebcontactuploadfile" http://www.example.com/wp-admin/admin-ajax.php Response:...

CVE-2015-0877

CVE-2015-0877 affects C-BOARD Moyuku prior to 1.03b3. The vulnerability is an unrestricted file upload in app/lib/mlf.pl that lets remote attackers upload a file with a null character in its name, potentially enabling arbitrary code execution on the server. Multiple sources (NVD, JVN/JVNDB, PRION...

CVE-2015-0877: Undefined Security Weakness

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name...

PT-2015-4933

Name of the Vulnerable Software and Affected Versions C-BOARD Moyuku versions prior to 1.03b3 Description The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with a 0 character in its name. Recommendations For...

Johnson Controls Metasys Unlimited File Upload Vulnerability

Johnson Controls Metasys is a building automation system from Johnson Controls. The system can be networked with weak electronic systems such as fire and security through a variety of open protocols or standard interfaces to provide system integrity for secure access. An unrestricted file upload...

WordPress Simple Ads Manager Plugin <= 2.5.95 - Unrestricted File Upload

This vulnerability exists in sam-ajax-admin.php and allows an attacker to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the "path" parameter. Solution Update the plugin...

WordPress Revolution Slider File Upload

Exploit Title: Wordpress Plugin Revolution Slider - Unrestricted File Upload Google Dork: Y0ur Brain Date: 27.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://revolution.themepunch.com/ Version: old Tested on: Windows Path of File :...

Unrestricted file upload

Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server ADS, Extended Application and Data Server aka ADX, LonWorks Control Server 85 LCS8520, Network Automation Engine NAE 55xx-x, Network Integration...

PT-2015-3808

Name of the Vulnerable Software and Affected Versions Johnson Controls Metasys versions 4.1 through 6.5 Description The issue allows remote attackers to execute arbitrary code by uploading a shell script due to an unrestricted file upload vulnerability in unspecified web services. Recommendations...

CVE-2014-5428: Undefined Security Weakness

Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server ADS, Extended Application and Data Server aka ADX, LonWorks Control Server 85 LCS8520, Network Automation Engine NAE 55xx-x, Network Integration...

Wordpress Plugin Revolution Slider - Unrestricted File Upload Exploit

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Revolution Slider - Unrestricted File Upload Google Dork: Y0ur Brain Date: 27.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://revolution.themepunch.com/ Version: old Tested on: Windows Pat...

PT-2015-6424

Name of the Vulnerable Software and Affected Versions ReFlex Gallery plugin versions prior to 3.1.4 Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the uploads/ directory...

WooThemes Daily Edition <= 1.6.2 - Unrestricted File Upload

The dailyedition WordPress theme was affected by an Unrestricted File Upload security vulnerability...

PT-2015-5655

Name of the Vulnerable Software and Affected Versions Fusion theme version 3.1 for Wordpress Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension in a fusion save action. This is due to an unrestricted file upload...

CVE-2015-2194: Undefined Security Weakness

Unrestricted file upload vulnerability in the fusionoptions function in functions.php in the Fusion theme 3.1 for Wordpress allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension in a fusionsave action, then accessing it via unspecified vector...

D-Link DCS-931L with firmware unlimited file upload vulnerability

The D-Link DCS-931L is a D-Link home wireless network camera. An unrestricted file upload vulnerability exists in the D-Link DCS-931L with firmware 1.04 earlier, which could allow a remote, authenticated user to execute arbitrary code by uploading a file with an executable file extension...