5639 matches found
CVE-2006-4602
CVE-2006-4602 affects TikiWiki (jhot.php) prior to/including 1.9.4 Sirius and earlier. Unrestricted file upload allows remote attackers to place a .php file in img/wiki/ and execute arbitrary PHP code. Connected sources document a remote-code-execution risk via jhot.php upload validation flaw; ex...
CVE-2006-4471: Unrestricted Upload of File with Dangerous Type
The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors...
CVE-2006-3362: Undefined Security Weakness
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in 1 Geeklog 1.4.0 through 1.4.0sr3, 2 toendaCMS 1.0.0 Shizouka Stable and earlier, 3 WeBid 0.5.4, and possibly other products, when installed on Apache with modmime, allows remote...
CVE-2006-2428: Unrestricted Upload of File with Dangerous Type
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...
imageVue < 16.2 admin/upload.php Unrestricted File Upload
The remote host is running imageVue, a web-based photo gallery application written in PHP. The installed version of imageVue allows unauthenticated attackers to upload arbitrary files, including files containing code that can then be executed subject to the privileges of the web server user id. I...
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload
ImageVue 0.16.1 - upload.php Unrestricted Arbitrary File Upload source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content...
ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload
source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation could allow attackers to upload an...
CVE-2006-0169: Undefined Security Weakness
addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory...
CVE-2005-4422
CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...
CVE-2005-4423: Undefined Security Weakness
Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to an accessible directory, as demonstrated using a file with a .php extension, aka "upload phpshell."...
CVE-2005-4422: Undefined Security Weakness
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...
CVE-2005-3288: Unrestricted Upload of File with Dangerous Type
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message...
CVE-2005-2699: Undefined Security Weakness
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have access to the end system...
CVE-2004-2262: Unrestricted Upload of File with Dangerous Type
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php...
CVE-2002-1841: Unrestricted Upload of File with Dangerous Type
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...
CVE-2004-2690
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files...
CVE-2003-1552
Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...