5949 matches found
CVE-2012-1153: Undefined Security Weakness
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...
VulnCheck KEV: CVE-2012-6081
Multiple unrestricted file upload vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary code by uploading a file with an executable extension, the...
PT-2012-2139
Name of the Vulnerable Software and Affected Versions OpenEMR version 4 Description The issue concerns an unrestricted file upload vulnerability in the patient photograph functionality. This allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension...
CVE-2011-5161: Undefined Security Weakness
Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the patient directory under...
CVE-2011-5134
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...
CVE-2011-5134
CVE-2011-5134 describes an unrestricted file upload vulnerability in the Joomla! JCE editor component (editor/extensions/browser/file.php) prior to version 2.0.18. The issue allows remote authenticated users with author privileges to upload a file with a double extension (e.g., .php.gif) and ther...
CVE-2011-5134: Undefined Security Weakness
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...
CVE-2012-4036: Undefined Security Weakness
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged b...
Joomla Component joomgalaxy v1.2.0.5 Remote File Upload
Exploit for php platform in category web applications Exploit Title: Joomgalaxy Remote File Upload v1.2.0.5 dork: inurl:comjoomgalaxy Date: 21-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.5...
Unrestricted file upload
Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message...
CVE-2012-4269: Undefined Security Weakness
Unrestricted file upload vulnerability in eFront 3.6.11 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension via an attachment in a message...
Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities
Joomla! Component comjoomgalaxy 1.2.0.4 - Multiple Vulnerabilities Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor:...
Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities
Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...
Joomla Component com_joomgalaxy 1.2.0.4 Multiple Vulnerabilites
Exploit for php platform in category web applications Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version...
Joomla! Component com_osproperty 2.0.2 - Unrestricted Arbitrary File Upload
Joomla! Component comosproperty 2.0.2 - Unrestricted Arbitrary File Upload Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ &...
WordPress Resume Submissions / Job Postings 2.5.1 Shell Upload
Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link: http://downloads.wordpress.org/plugin/resume-submissions-job-postings.2.5.1.zip Version: 2.5.1...
Joomla OS Property Shell Upload
Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ & http://poisonsecurity.wordpress.com/ Vendor: Ossolution Team http://extensions.joomla.org/ Version: 2.0...
Joomla Component com_osproperty Unrestricted File Upload
Exploit for php platform in category web applications Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ & http://poisonsecurity.wordpress.com/ Vendor:...
WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload
Exploit for php platform in category web applications Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...
WordPress Resume Submissions & Job Postings Plugin - Unrestricted File Upload
Resume Submissions & Job Postings plugin is prone to an unrestricted file upload vulnerability. It causes several problems: uploaded file can be accessed directly by understanding how the plugin renames files, file names are rewritten by the following code, also the plugin creates an MD5 hash of...