CVE-2008-0656

The CVE-2008-0656 entry concerns EMC Documentum components: Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317. The vulnerability is an uncontrolled file upload in dmclTrace.jsp that allows a remote attacker to overwrite arbitrary files by supplying a crafted filename attribute. The availabl...

CVE-2008-0656: Improper Input Validation

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute...

CVE-2008-0457: Improper Input Validation

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors...

CVE-2008-0632: Undefined Security Weakness

Unrestricted file upload vulnerability in cpuploadimage.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory...

CVE-2008-0175

GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier is affected by an unrestricted file upload vulnerability via Add WebSource, exploitable to upload arbitrary files (including ASP) to the main virtual directory. Root cause is a faulty Java RMI call that lets an authenticated attacker s...

CVE-2008-0175: Undefined Security Weakness

Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...

CVE-2008-0373: Improper Input Validation

Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files...

Debian Security Advisory DSA 1371-1 (phpwiki)

The remote host is missing an update to phpwiki announced via advisory DSA 1371-1. OpenVAS Vulnerability Test $Id: deb13711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1371-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0251: Improper Input Validation

Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors...

CVE-2008-0233: Undefined Security Weakness

Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg...

CVE-2008-0222: Improper Control of Generation of Code

Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors...

CVE-2007-5401: Undefined Security Weakness

Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions...

CVE-2007-6668

CVE-2007-6668 affects admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x, where a missing requirement for administrative privileges enables remote attackers to upload arbitrary files (demonstrated with a .php file and a .php%00.jpeg). The connected records confirm the vulnerability’s existen...

CVE-2007-6668: Undefined Security Weakness

admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...

CVE-2007-6650

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

CVE-2007-6650

The CVE-2007-6650 entry describes an Unrestricted file upload vulnerability in the Bitweaver R2 CMS, specifically in the fisheye/upload.php endpoint. An attacker can upload arbitrary files by abusing the image/gif content type (and possibly other image/PDF types), demonstrated by uploading a .hta...

CVE-2007-6650: Undefined Security Weakness

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

CVE-2007-6479: Undefined Security Weakness

Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...

CVE-2007-5736

Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via unspecified vectors. NOTE: these files are stored with .html extensions, so the scope of the attack might be limited to resource consumption and possibly XSS...

CVE-2007-5733

The CVE-2007-5733 entry describes an unrestricted file upload in Japanese PHP Gallery Hosting (upload/upload.php) when Open directory mode is enabled. The vulnerability allows remote attackers to upload and execute arbitrary PHP code by crafting a ServerPath parameter with a filename using a doub...