ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-091 : Symantec Web Gateway uploadfile Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-091 June 8, 2012 - -- CVE ID: CVE-2012-0299 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Symantec ...

Symantec Web Gateway upload_file Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists because Symantec Web Gateway allows unauthenticated users to upload a file while...

Symantec Web Gateway upload_file Remote Code Execution Vulnerability

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported:...

Concrete CMS v5.5 <= Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Orbis CMS 1.0.2 Upload File Exploit

Exploit for php platform in category web applications +-----------------------------------------+ Exploit Title: Orbis CMS 1.0.2 Upload File Exploit Author: Dr.KroOoZ Software : http://www.novo-ws.com/orbis-cms/orbis-1.0.2.zip Tested on: Linux - Windows Dork : "Powered by Orbis CMS" Video :...

CMSmini 0.1.1 Upload File Exploit

Exploit for php platform in category web applications +-----------------------------------------+ Exploit Title: CMSmini 0.1.1 Upload File Exploit Author: Dr.KroOoZ Software : http://sourceforge.net/projects/cmsmini/files/cmsmini/cmsmini-0.1/cmsmini-0.1.tar.gz/download Tested on: Linux - Windows...

The cloud from the enterprise built Station system through the kill oday-vulnerability warning-the black bar safety net

Saying boring to code the site the next set of program analysis Can be to the cloud from the enterprise built Station system, download the number very much so look up First saw it in the background of the login. the asp file. A look at the side of there ass and... if request. Form"submit""" then ...

WalRack upload file handilng vulnerability

Overview WalRack Walrus File Rack CGI contains a vulnerability in handling upload files. WalRack is a CGI that provides an interface to upload files on the Web. WalRack contains a vulnerability in handling upload files. Impact An arbitrary PHP script may be executed on the server where WalRack is...

XtreamerPRO Media-player 2.6.02.7.0 - Multiple Vulnerabilities

XtreamerPRO Media-player 2.6.02.7.0 - Multiple Vulnerabilities Exploit Title: XtreamerPRO Media-player and streamer multiple vulnerabilities Google Dork: intitle:Xtreamer Media Server + "2009 Xtreamer.net, All right reserved." Date: 15/05/2011 Author: Itzik Chen Software Link: www.xtreamer.net...

AlegroCart <= 1.2.5 (FCKeditor) Upload File / SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ATutor <= 2.0.2 Upload File Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Kleophatra 0.1.4 - Arbitrary File Upload

Kleophatra 0.1.4 - Arbitrary File Upload !===========================================================================! Kleophatra 0.1.4 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date...

Phpbuddies 0day Arbitrary Upload File Vulnerability

Exploit for php platform in category web applications !===========================================================================! Phpbuddies 0day Arbitrary Upload File Vulnerability Author : Xr0b0t email protected Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

gausCMS - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-21-gauscms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : gausCMS Multiple Vulnerabilities Affected Version : Gaus CMS...

ECShop v2.7.2 (FCKeditor Remote Upload File) Exploit

Exploit for asp platform in category web applications ==================================================== ECShop v2.7.2 FCKeditor Remote Upload File Exploit ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

ECShop v2.6.1 (FCKeditor Remote Upload File / XSS) Exploit

Exploit for asp platform in category web applications ========================================================== ECShop v2.6.1 FCKeditor Remote Upload File / XSS Exploit ==========================================================...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

7 1 1 enterprise web site management program V6. 0 Then proof upload vulnerability and exploit-vulnerability warning-the black bar safety net

sfmb ----------------------- The other day a Cookie injection vulnerability, and today they turned to see to In the ADMIN directory there are 2 Upload File upfile. asp and upfile2. asp These 2 components of the function is: without logging in the backend, without having to cut packages, direct...

phpshell written to the startup items to mention right-vulnerability warning-the black bar safety net

The actual operation can be in webshell with the udf. dll mention to the right,with the function to upload file function to upload the file to the startup directory,then shut the function re-starting the system. Currently not successful,the opportunity of the local test,the first record on this. ...