CVE-2008-6518: Improper Control of Generation of Code

Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users to execute arbitrary code by uploading a PHP file as an Avatar, then accessing the avatar via a direct request...

CVE-2008-6513: Improper Control of Generation of Code

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

CVE-2008-6492: Improper Input Validation

Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...

CVE-2008-6367: Improper Input Validation

Unrestricted file upload vulnerability in Photos/createalbum.php in Social Groupie allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in Memberimages/...

CVE-2008-6207

The CVE-2008-6207 entry describes an unrestricted file upload vulnerability in PHPG Upload 1.0, specifically in form_upload.php, where remote authenticated users can upload a file with an executable extension and access it via a direct request to execute arbitrary code. This yields potential remo...

CVE-2008-6207: Improper Input Validation

Unrestricted file upload vulnerability in formupload.php in PHPG Upload 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown; the...

CVE-2008-6178: Improper Control of Generation of Code

Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploadin...

CVE-2009-0602: Improper Input Validation

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2008-6084

CVE-2008-6084 affects Iamma Simple Gallery 1.0 and 2.0. An unrestricted file upload flaw in pages/download.php lets remote attackers upload a file with an executable extension and then access it under the uploads directory to execute PHP code. NVD lists a MEDIUM severity (CVSS v2 base score 6.8) ...

CVE-2008-6084: Improper Input Validation

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2009-0372: Improper Input Validation

Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and an image content type via a users editProfile action, then accessing this file...

CVE-2008-5732

CVE-2008-5732 affects KafooeyBlog 1.55b via an unrestricted file upload in lib/image_upload.php. The vulnerability permits remote code execution when an attacker uploads a file with an executable extension and then directly requests that file. The connected records corroborate the same descriptio...

CVE-2008-5732: Improper Input Validation

Unrestricted file upload vulnerability in lib/imageupload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2008-5677

CVE-2008-5677 describes an unrestricted file upload in Kwalbum versions up to 2.0.4 (and earlier) when PICS_PATH is located in the web root. Remote authenticated users with upload capability can execute arbitrary code by uploading a file with an executable extension and accessing it via a direct ...

CVE-2008-5663

The CVE-2008-5663 issue affects Kusaba 1.0.4 and earlier, where multiple unrestricted file upload flaws allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension via load_receiver.php or via a shipainter action to paint_save.php, then accessing th...

CVE-2008-5663: Improper Input Validation

Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 loadreceiver.php or 2 a shipainter action to paintsave.php, then accessing the uploaded file via a dire...

CVE-2008-5677: Improper Input Validation

Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICSPATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the...

CVE-2008-5220

The CVE-2008-5220 issue affects wPortfolio 0.3 and earlier . It is an unrestricted file upload vulnerability in admin/upload_form.php that allows remote attackers to achieve arbitrary code execution by uploading a file with an executable extension and then requesting it directly from admin/tmp/ ....

CVE-2008-5220: Improper Input Validation

Unrestricted file upload vulnerability in admin/uploadform.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/...

CVE-2008-4878: Improper Input Validation

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...