Bludit Remote Code Execution Vulnerability (CNVD-2019-44571)

Bludit is an open source, lightweight blog content management system CMS. A remote code execution vulnerability exists in Bludit version 3.9.2, which can be exploited by remote attackers to execute code with the help of the bl-kernel/ajax/upload-images.php file...

CVE-2014-3123

Cross-site scripting XSS vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or...

Network odd CWMS enterprise website Management System 3. 0 editor vulnerability-vulnerability warning-the black bar safety net

Network odd CWMS enterprise website Management System 3. 0 vulnerability google: the Powered by wqCWMS 3.0 Default account password: wangqi wagnqi I can't find anything else that gets the account password the way. Into the background, add article, see the editor Then browse the server myself, fck...

Ebits Online SQL injection and upload vulnerabilities-vulnerability warning-the black bar safety net

Ebits Online program exist two vulnerabilities, the weddingtopics. php page the filter is not carefully generatedSQL injectionattack uploadimages. php page in you can upload any file. SQL injection: = SQL injectionstatement For example: -- Upload vulnerability: Official address: Note: author: iMe...

Ebits Online <= SQL Injection & upload shell

Exploit for php platform in category web applications ============================================ Ebits Online only db Exploit :D...

Unrestricted file upload

Unrestricted file upload vulnerability in ofcuploadimage.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when registerglobals is enabled, allows remote authenticated users to...

CVE-2009-4140

The Open Flash Chart library (specifically ofc_upload_image.php ) contains an unrestricted file upload vulnerability caused by improper validation of the name parameter. When register_globals is enabled, remote authenticated users can execute arbitrary code by uploading a file with an executable ...

CVE-2005-1583: Undefined Security Weakness

1Two News 1.0 allows remote attackers to 1 delete images for new stories via a direct request to admin/delete.php or 2 upload arbitrary images via a direct request to admin/upload.php...

PT-2004-3152 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ version 1.4.0 Description: The issue allows remote attackers to access the Image Manager without authorization, enabling them to upload or delete images via a direct request. Recommendations: For phpMyFAQ version 1.4.0, consider...