CVE-2014-2088: Undefined Security Weakness

Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an uploadfiles action to the uploadFiles command, and then accessing the .php file via a direct request to a certain clientid pathname...

CVE-2013-6722

Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...

CVE-2013-6722

CVE-2013-6722 affects IBM WebSphere Portal 7.x (before 7.0.0.2 CF27) and 8.x (through 8.0.0.1 CF09). The issue is an unrestricted remote file upload in the Registration/Edit My Profile portlet, which can enable remote attackers to cause a denial of service or modify data via unspecified vectors. ...

PT-2014-3174

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF26 and 8.x through 8.0.0.1 CF08 Description The issue is related to an unrestricted file upload vulnerability in the Registration/Edit My Profile portlet. This vulnerability can be exploited ...

CVE-2013-6722: Undefined Security Weakness

Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a denial of service or modify data via unspecified vectors...

CVE-2013-6332: Undefined Security Weakness

Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it...

CVE-2013-4898

CVE-2013-4898 : Unrestricted file upload in SocialEngine Timeline Plugin 4.2.5p9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then retrieving it from public/temporary/timeline/. The vulnerability stems from accepting uploaded files ...

CVE-2013-4898: Undefined Security Weakness

Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

VulnCheck KEV: CVE-2013-7102

Multiple unrestricted file upload vulnerabilities in 1 media-upload.php, 2 media-upload-lncthumb.php, and 3 media-upload-sqbutton.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extensio...

CVE-2013-7102: Improper Input Validation

Multiple unrestricted file upload vulnerabilities in 1 media-upload.php, 2 media-upload-lncthumb.php, and 3 media-upload-sqbutton.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extensio...

PT-2013-6274

Name of the Vulnerable Software and Affected Versions OptimizePress theme versions prior to 1.61 Description The issue concerns unrestricted file upload vulnerabilities in multiple files within the OptimizePress theme for WordPress. These vulnerabilities allow remote attackers to execute arbitrar...

PT-2013-6130

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Development Infrastructure NWDI affected versions not specified Description The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to execute arbitrary code by uploading a file with an executab...

CVE-2013-6820: Undefined Security Weakness

Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...

DEBIAN-CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

CVE-2013-2114

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

CVE-2013-2114: Undefined Security Weakness

Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...

Critical vulnerability in Twitter allows attacker to upload Unrestricted Files

Security expert Ebrahim Hegazy, Cyber Security Analyst Consultant at Q-CERT, has found a serious vulnerability in Twitter that allows an attacker to upload files of any extension including PHP. When an application does not validate or improperly validates file types before uploading files to the...

CVE-2013-4465

Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecifie...

PT-2013-5028

Name of the Vulnerable Software and Affected Versions Simple Machines Forum versions prior to 2.0.6 Simple Machines Forum versions prior to 2.1 Description The issue is related to an unrestricted file upload vulnerability in the avatar upload functionality. This allows remote authenticated users ...

CVE-2013-4465: Undefined Security Weakness

Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecifie...