CVE-2008-6822: Undefined Security Weakness

Unrestricted file upload vulnerability in uploadp.php in New Earth Programming Team NEPT imgupload aka Image Uploader 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a modified content type, then accessing this file via a direct request, ...

CVE-2008-6814

The CVE-2008-6814 entry affects SimpleBoard (com_simpleboard) for Mambo, specifically the Simpleboard Mambo module 1.0.1 and earlier. The vulnerability is an unrestricted file upload that allows remote code execution by uploading a file with an executable extension and an image/jpeg content type ...

CVE-2008-6814: Improper Input Validation

Unrestricted file upload vulnerability in imageupload.php in the SimpleBoard comsimpleboard component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direc...

CVE-2009-1750

CVE-2009-1750 concerns VidSharePro with an Unrestricted file upload vulnerability that lets remote authenticated users execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The description identifies the affected product and the gen...

CVE-2009-1750: Undefined Security Weakness

Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2008-6811

The CVE-2008-6811 vulnerability affects the WordPress e-Commerce plugin (≤ 3.4). It is an unrestricted file upload in image_processing.php that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it directly under wp-content/plugin...

WordPress e-Commerce Plugin <= 3.4 - Unrestricted File Upload

Because of this vulnerability in imageprocessing.php, the attackers can execute arbitrary code by uploading a file with an executable extension. Solution Update the plugin...

CVE-2008-6811: Undefined Security Weakness

Unrestricted file upload vulnerability in imageprocessing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2009-1663: Undefined Security Weakness

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...

CVE-2009-1659: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...

CVE-2008-6806: Improper Input Validation

Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/artikel/...

CVE-2009-1609

CVE-2009-1609 refers to an unrestricted file upload vulnerability in Battle Blog 1.25, specifically in admin/uploadform.asp. An attacker can upload a file with an executable extension and then access it via a direct request to the uploaded file, enabling remote code execution. The entry is suppor...

CVE-2009-1615: Undefined Security Weakness

Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files aka Manage Files request to the default URI, then accessing the file via a direct request...

CVE-2009-1609: Improper Input Validation

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2008-6785: Improper Control of Generation of Code

Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file...

CVE-2008-6768

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/...

CVE-2008-6769

CVE-2008-6769 : Unrestricted file upload vulnerability in upload.php of YourPlace 1.0.2 and earlier. Affected component: YourPlace upload mechanism (upload.php). Root cause: allowing upload of files with executable extensions and access via a direct URL, enabling remote authenticated users to exe...

CVE-2008-6769: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2009-1483: Undefined Security Weakness

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2008-6768: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/...