172 matches found
vBulletin 3.8.* - 4.* DownloadsII poison nullbyte
Exploit for php platform in category web applications ================================================= vBulletin 3.8. - 4. DownloadsII poison nullbyte ================================================= Exploit Title: VBulletin 4. DownloadsII poison nullbyte Date: 2010-04-12 Author: Un-Dead Team:...
When the website does not allow upload ASP,CGI,CER,CDX,HTR and other types of files-bug warning-the black bar safety net
Method:Upload a shtm file, content is:!-- include file="conn. asp" - A direct request to the shtm file,conn. asp is unobstructed, the database path is also on hand. Parsing:!-- include file="conn. asp" - is an SSI Directive,its role is the"conn. asp"to copy the contents to the current page,when a...
Code injection
The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109...
CVE-2009-0194
The domain-locking implementation in the GARMINAXCONTROL.GarminAxControlt.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that 1 download and 2 upload requests come from a web site specified by the user, which allows remote...
Alex Article-Engine 1.3.0 - 'FCKeditor' Arbitrary File Upload
Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...
LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== LiveCMS = 3.4 categoria.php cid Remote SQL Injection Exploit =============================================================== !/usr/bin/perl / \ / \ | | | | | | | | | | | / | |...
CVE-2005-4518
CVE-2005-4518 affects Mantis before 0.19.4. An attacker can bypass the file upload size restriction by altering max_file_size in bug_file_add.php, bug_report.php, bug_report_advanced_page.php, or proj_doc_add_page.php. Public advisories (Debian GLSA/DSA, Gentoo GLSA) document fixed versions (e.g....
CVE-2005-1580
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code...
CVE-2005-1580
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code...
phpBB Upload Script "up.php" Arbitrary File Upload
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...
CVE-2005-0254
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those...
CVE-2002-2331
W3Mail 1.0.2 through 1.0.5 with server side scripting SSI enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the...